Configuring Voice Aware 802.1X Security - Cisco Catalyst 2960-X Security Configuration Manual

Configuring Voice Aware 802.1x Security

Command or Action
Step 3
dot1x test eapol-capable [interface interface-id]
Example:
Switch# dot1x test eapol-capable interface
gigabitethernet1/0/13
DOT1X_PORT_EAPOL_CAPABLE:DOT1X: MAC
00-01-02-4b-f1-a3 on gigabitethernet1/0/13 is
EAPOL
capable
Step 4 dot1x test timeout timeout
Step 5
end
Example:
Switch(config)# end
Step 6
show running-config
Example:
Switch# show running-config
Step 7 copy running-config startup-config
Example:
Switch# copy running-config startup-config
Related Topics
802.1x Readiness Check, on page 277
Configuring Voice Aware 802.1x Security
Note To use voice aware IEEE 802.1x authentication, the switch must be running the LAN base image.
You use the voice aware 802.1x security feature on the switch to disable only the VLAN on which a security
violation occurs, whether it is a data or voice VLAN. You can use this feature in IP phone deployments where
a PC is connected to the IP phone. A security violation found on the data VLAN results in the shutdown of
only the data VLAN. The traffic on the voice VLAN flows through the switch without interruption.
Follow these guidelines to configure voice aware 802.1x voice security on the switch:
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
302
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Enables the 802.1x readiness check on the switch.
(Optional) For interface-id specify the port on which to check
for IEEE 802.1x readiness.
If you omit the optional interface keyword, all
Note
interfaces on the switch are tested.
(Optional) Configures the timeout used to wait for EAPOL
response. The range is from 1 to 65535 seconds. The default
is 10 seconds.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
OL-29048-01