Cisco IE-4000 Software Configuration Manual page 231

Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Command
6. end
7. show authentication interface
interface-id
8. copy running-config startup-config
Configuring the Maximum Number of Authentication Attempts
Command
1. configure terminal
2. interface interface-id
3. switchport mode access
or
switchport mode private-vlan host
4. authentication port-control auto
5. authentication event fail action
authorize vlan-id
6. authentication event retry retry count
7. end
8. show authentication interface
interface-id
9. copy running-config startup-config
Configuring Inaccessible Authentication Bypass
Command
1. configure terminal
2. radius-server dead-criteria
time time tries tries
3. radius-server deadtime
minutes
Purpose
Returns to privileged EXEC mode.
(Optional) Verifies your entries.
(Optional) Saves your entries in the configuration file.
Purpose
Enters global configuration mode.
Specifies the port to be configured, and enters interface configuration
mode.
Sets the port to access mode,
or
Configures the Layer 2 port as a private-VLAN host port.
Enables 802.1x authentication on the port.
Specifies an active VLAN as an 802.1x restricted VLAN. The range is
1 to 4096.
You can configure any active VLAN except an internal VLAN (routed port),
an RSPAN VLAN, a primary private VLAN, or a voice VLAN as an 802.1x
restricted VLAN.
Specifies a number of authentication attempts to allow before a port
moves to the restricted VLAN. The range is 1 to 3, and the default is 3.
Returns to privileged EXEC mode.
(Optional) Verifies your entries.
(Optional) Saves your entries in the configuration file.
Purpose
Enters global configuration mode.
(Optional) Sets the conditions that are used to decide when a RADIUS server is
considered unavailable or dead.
The range for time is from 1 to 120 seconds. The switch dynamically determines the
default seconds value that is 10 to 60 seconds.
The range for tries is from 1 to 100. The switch dynamically determines the default
tries parameter that is 10 to 100.
(Optional) Sets the number of minutes that a RADIUS server is not sent requests.
The range is from 0 to 1440 minutes (24 hours). The default is 0 minutes.
227