Cisco Catalyst 2960 Software Configuration Manual page 328

Configuring 802.1x Authentication
This example shows how to configure the VLAN groups, to map the VLANs to the groups, to and verify
the VLAN group configurations and mapping to the specified VLANs:
Switch(config)# vlan group eng-dept vlan-list 10
switch(config)# show vlan group group-name eng-dept
Group Name
-------------
eng-dept
switch# show dot1x vlan-group all
Group Name
-------------
eng-dept
hr-dept
This example shows how to add a VLAN to an existing VLAN group and to verify that the VLAN was
added:
switch(config)# vlan group eng-dept vlan-list 30
switch(config)# show vlan group eng-dept
Group Name
-------------
eng-dept
This example shows how to remove a VLAN from a VLAN group:
switch# no vlan group eng-dept vlan-list 10
This example shows that when all the VLANs are cleared from a VLAN group, the VLAN group is
cleared:
switch(config)# no vlan group eng-dept vlan-list 30
Vlan 30 is successfully cleared from vlan group eng-dept.
switch(config)# show vlan group group-name eng-dept
This example shows how to clear all the VLAN groups:
switch(config)# no vlan group end-dept vlan-list all
switch(config)# show vlan-group all
For more information about these commands, see the Cisco IOS Security Command Reference.
Configuring NAC Layer 2 802.1x Validation
You can configure NAC Layer 2 802.1x validation, which is also referred to as 802.1x authentication
with a RADIUS server.
Beginning in privileged EXEC mode, follow these steps to configure NAC Layer 2 802.1x validation.
The procedure is optional.
Command
Step 1 configure terminal
Step 2
interface interface-id
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
10-60
Chapter 10
Vlans Mapped
--------------
10
Vlans Mapped
--------------
10
20
Vlans Mapped
--------------
10,30
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Configuring IEEE 802.1x Port-Based Authentication
OL-26520-01