Configuring Vlan Id-Based Mac Authentication; Configuring Flexible Authentication Ordering - Cisco Catalyst 2975 Software Configuration Manual

Configuring 802.1x Authentication

Configuring VLAN ID-based MAC Authentication

Beginning in privileged EXEC mode, follow these steps:
Command
Step 1 configure terminal
Step 2
mab request format attribute 32 vlan access-vlan
Step 3 copy running-config startup-config
There is no show command to confirm the status of VLAN ID-based MAC authentication. You can use
the debug radius accounting privileged EXEC command to confirm the RADIUS attribute 32. For more
information about this command, see the Cisco IOS Debug Command Reference, Release 12.2:
http://www.cisco.com/en/US/docs/ios/debug/command/reference/db_q1.html#wp1123741
This example shows how to globally enable VLAN ID-based MAC authentication on a switch:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# mab request format attribute 32 vlan access-vlan
Switch(config-if)# exit

Configuring Flexible Authentication Ordering

Beginning in privileged EXEC mode, follow these steps:
Command
Step 1 configure terminal
Step 2
interface interface-id
Step 3
authentication order [dot1x | mab] |
{webauth}
Step 4
authentication priority [dot1x | mab] |
{webauth}
Step 5 show authentication
Step 6 copy running-config startup-config
This example shows how to configure a port attempt 802.1x authentication first, followed by web
authentication as fallback method:
Switch# configure terminal
Switch(config)# interface gigabitethernet2/0/1
Switch(config)# authentication order dot1x webauth
Catalyst 2975 Switch Software Configuration Guide
10-64
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Purpose
Enter global configuration mode.
Enable VLAN ID-based MAC authentication.
(Optional) Save your entries in the configuration
file.
End with CNTL/Z.
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface
configuration mode.
(Optional) Set the order of authentication methods used on a port.
(Optional) Add an authentication method to the port-priority list.
(Optional) Verify your entries.
(Optional) Save your entries in the configuration file.
OL-19720-02