Configuring Mac Authentication Bypass; Disabling Ieee 802.1X Authentication On The Port - Cisco Catalyst 2928 Software Configuration Manual

Chapter 9 Configuring IEEE 802.1x Port-Based Authentication

Configuring MAC Authentication Bypass

Beginning in privileged EXEC mode, follow these steps to enable MAC authentication bypass. This
procedure is optional.
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3 dot1x port-control auto
Step 4
dot1x mac-auth-bypass [eap]
Step 5
end
Step 6 show dot1x interface interface-id
Step 7 copy running-config startup-config
To disable MAC authentication bypass, use the no dot1x mac-auth-bypass interface configuration
command.
This example shows how to enable MAC authentication bypass:
Switch(config-if)# dot1x mac-auth-bypass

Disabling IEEE 802.1x Authentication on the Port

You can disable IEEE 802.1x authentication on the port by using the no dot1x pae interface
configuration command.
Beginning in privileged EXEC mode, follow these steps to disable IEEE 802.1x authentication on the
port. This procedure is optional.
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3 no dot1x pae
Step 4 end
Step 5
show dot1x interface interface-id
Step 6
copy running-config startup-config
To configure the port as an IEEE 802.1x port access entity (PAE) authenticator, which enables
IEEE 802.1x on the port but does not allow clients connected to the port to be authorized, use the dot1x
pae authenticator interface configuration command.
OL-23389-01
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
For the supported port types, see the
Configuration Guidelines" section on page
Enable IEEE 802.1x authentication on the port.
Enable MAC authentication bypass.
(Optional) Use the eap keyword to configure the switch to use EAP for
authorization.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Disable IEEE 802.1x authentication on the port.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Catalyst 2928 Switch Software Configuration Guide
Configuring IEEE 802.1x Authentication
"IEEE 802.1x Authentication
9-19.
9-31