Configuring Vlan Id-Based Mac Authentication; Configuring Flexible Authentication Ordering - Cisco Catalyst 2960-X Security Configuration Manual

Configuring VLAN ID-based MAC Authentication

Configuring VLAN ID-based MAC Authentication
Beginning in privileged EXEC mode, follow these steps:
SUMMARY STEPS
1. configure terminal
2. mab request format attribute 32 vlan access-vlan
3. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2 mab request format attribute 32 vlan access-vlan
Example:
Switch(config)# mab request format attribute 32 vlan
access-vlan
Step 3
copy running-config startup-config
Example:
Switch# copy running-config startup-config

Configuring Flexible Authentication Ordering

The examples used in the instructions below changes the order of Flexible Authentication Ordering so that
MAB is attempted before IEEE 802.1X authentication (dot1x). MAB is configured as the first authentication
method, so MAB will have priority over all other authentication methods.
Before changing the default order and priority of these authentication methods, however, you should
Note
understand the potential consequences of those changes. See
iosswrel/ps6537/ps6586/ps6638/application_note_c27-573287_ps6638_Products_White_Paper.html
details.
Beginning in privileged EXEC mode, follow these steps:
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
350
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Enters global configuration mode.
Enables VLAN ID-based MAC authentication.
(Optional) Saves your entries in the
configuration file.
http://www.cisco.com/en/US/prod/collateral/
for
OL-29048-01