Cisco Catalyst 2960-X Security Configuration Manual page 362

Configuring NAC Layer 2 802.1x Validation
Command or Action
Step 2
interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/3
Step 3 switchport mode access
Example:
Switch(config-if)# switchport mode access
Step 4 authentication event no-response action authorize vlan
vlan-id
Example:
Switch(config-if)# authentication event
no-response action authorize vlan 8
Step 5 authentication periodic
Example:
Switch(config-if)# authentication periodic
Step 6 authentication timer reauthenticate
Example:
Switch(config-if)# authentication timer
reauthenticate
Step 7
end
Example:
Switch(config-if)# end
Step 8 show authentication sessions interface interface-id
Example:
Switch# show authentication sessions interface
gigabitethernet2/0/3
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
338
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Specifies the port to be configured, and enter interface
configuration mode.
Sets the port to access mode only if you configured the
RADIUS server.
Specifies an active VLAN as an 802.1x guest VLAN. The
range is 1 to 4094.
You can configure any active VLAN except an internal
VLAN (routed port), an RSPAN VLAN, or a voice VLAN
as an 802.1x guest VLAN.
Enables periodic re-authentication of the client, which is
disabled by default.
Sets re-authentication attempt for the client (set to one
hour).
This command affects the behavior of the switch only if
periodic re-authentication is enabled.
Returns to privileged EXEC mode.
Verifies your entries.
OL-29048-01