Cisco Catalyst 2960 Software Configuration Manual page 335

Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Command
Step 10
show authentication
Step 11
copy running-config startup-config
This example shows how to configure open 1x on a port:
Switch# configure terminal
Switch(config)# interface gigabitethernet1/0/2
Switch(config)# authentication control-direction both
Switch(config)# au ten tic at ion fallback profile1
Switch(config)# authentication host-mode multi-auth
Switch(config)# authentication open
Switch(config)# authentication order dot1x webauth
Switch(config)# authentication periodic
Switch(config)# authentication port-control auto
Disabling 802.1x Authentication on the Port
You can disable 802.1x authentication on the port by using the no dot1x pae interface configuration
command.
Beginning in privileged EXEC mode, follow these steps to disable 802.1x authentication on the port.
This procedure is optional.
Command
Step 1 configure terminal
Step 2
interface interface-id
Step 3
no dot1x pae
Step 4 end
Step 5 show authentication interface
interface-id
Step 6 copy running-config startup-config
To configure the port as an 802.1x port access entity (PAE) authenticator, which enables 802.1x on the
port but does not allow clients connected to the port to be authorized, use the dot1x pae authenticator
interface configuration command.
This example shows how to disable 802.1x authentication on the port:
Switch(config)# interface gigabitethernet1/0/2
Switch(config-if)# no dot1x pae authenticator
OL-26520-01
Purpose
(Optional) Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Disable 802.1x authentication on the port.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
Configuring 802.1x Authentication
10-67