Cisco Catalyst 3560-X Software Configuration Manual page 297

Chapter 1 Configuring IEEE 802.1x Port-Based Authentication
Authentication Manager CLI Commands
The authentication-manager interface-configuration commands control all the authentication methods,
such as 802.1x, MAC authentication bypass, and web authentication. The authentication manager
commands determine the priority and order of authentication methods applied to a connected host.
The authentication manager commands control generic authentication features, such as host-mode,
violation mode, and the authentication timer. Generic authentication commands include the
authentication host-mode, authentication violation, and authentication timer interface
configuration commands.
802.1x-specific commands begin with the dot1x keyword. For example, the authentication
port-control auto interface configuration command enables authentication on an interface. However,
the dot1x system-auth-control global configuration command only globally enables or disables 802.1x
authentication.
If 802.1x authentication is globally disabled, other authentication methods are still enabled on that port,
Note
such as web authentication.
The authentication manager commands provide the same functionality as earlier 802.1x commands.
Table 1-2 Authentication Manager Commands and Earlier 802.1x Commands
The authentication manager
commands in Cisco IOS
Release 12.2(50)SE or later
authentication control-direction
{both | in}
authentication event
authentication fallback
fallback-profile
authentication host-mode
[multi-auth | multi-domain |
multi-host | single-host]
authentication order
authentication periodic
authentication port-control {auto
| force-authorized | force-un
authorized}
authentication timer
OL-25303-03
The equivalent 802.1x commands in
Cisco IOS Release 12.2(46)SE and
earlier
dot1x control-direction {both |
in}
dot1x auth-fail vlan
dot1x critical (interface
configuration)
dot1x guest-vlan6
dot1x fallback fallback-profile
dot1x host-mode {single-host |
multi-host | multi-domain}
dot1x mac-auth-bypass
dot1x reauthentication
dot1x port-control {auto |
force-authorized |
force-unauthorized}
dot1x timeout
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
Understanding IEEE 802.1x Port-Based Authentication
Description
Enable 802.1x authentication with the
wake-on-LAN (WoL) feature, and configure the
port control as unidirectional or bidirectional.
Enable the restricted VLAN on a port.
Enable the inaccessible-authentication-bypass
feature.
Specify an active VLAN as an 802.1x guest
VLAN.
Configure a port to use web authentication as a
fallback method for clients that do not support
802.1x authentication.
Allow a single host (client) or multiple hosts on
an 802.1x-authorized port.
Enable the MAC authentication bypass feature.
Enable periodic re-authentication of the client.
Enable manual control of the authorization state of
the port.
Set the 802.1x timers.
1-9