Authentication Order - Cisco Catalyst 3560-X Command Reference Manual

authentication order

authentication order
Syntax Description
Command Default
Command Modes
Command History
Usage Guidelines
Examples
Catalyst 3750-X and 3560-X Switch Command Reference
2-40
Downloaded from www.Manualslib.com
Use the authentication order interface configuration command to set the order of authentication
methods used on a port.
authentication order [dot1x | mab] {webauth}
no authentication order
dot1x Add 802.1x to the order of authentication methods.
mab Add MAC authentication bypass (MAB) to the order of authentication
methods.
webauth Add web authentication to the order of authentication methods.
The default authentication order is dot1x followed by mab and webauth.
Interface configuration
Release Modification
12.2(53)SE2 This command was introduced.
Ordering sets the order of methods that the switch attempts when trying to authenticate a new device
connected to a port. If one method in the list is unsuccessful, the next method is attempted.
Each method can only be entered once. Flexible ordering is only possible between 802.1x and MAB.
Web authentication can be configured as either a standalone method or as the last method in the order
after either 802.1x or MAB. Web authentication should be configured only as fallback to dot1x or mab.
This example shows how to add 802.1x as the first authentication method, MAB as the second method,
and web authentication as the third method:
Switch(config-if)# authentication order dotx mab webauth
This example shows how to add MAC authentication Bypass (MAB) as the first authentication method
and web authentication as the second authentication method:
Switch(config-if)# authentication order mab webauth
You can verify your settings by entering the show authentication privileged EXEC command.
manuals search engine
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
OL-21522-02