Cisco Catalyst 2960-XR Security Configuration Manual page 295

Configuring IEEE 802.1x Port-Based Authentication
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2 interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/3
Step 3 Use one of the following:
• switchport mode access
• switchport mode private-vlan host
Example:
or
Switch(config-if)# switchport mode access
Step 4
authentication port-control auto
Example:
Switch(config-if)# authentication port-control
auto
Step 5 authentication event fail action authorize vlan vlan-id
Example:
Switch(config-if)# authentication event fail
action authorize vlan 8
Step 6 authentication event retry retry count
Example:
Switch(config-if)# authentication event retry
2
OL-29434-01
Purpose
Enters the global configuration mode.
Specifies the port to be configured, and enter interface
configuration mode.
• Sets the port to access mode.
• Configures the Layer 2 port as a private-VLAN host
Enables 802.1x authentication on the port.
Specifies an active VLAN as an 802.1x restricted VLAN.
The range is 1 to 4094.
You can configure any active VLAN except an internal
VLAN (routed port), an RSPAN VLAN, a primary private
VLAN, or a voice VLAN as an 802.1x restricted VLAN.
Specifies a number of authentication attempts to allow before
a port moves to the restricted VLAN. The range is 1 to 3,
and the default is 3.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Configuring a Restricted VLAN
port.
273