Configuring Flexible Authentication Ordering - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring Flexible Authentication Ordering

Command or Action
Step 3
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Configuring Flexible Authentication Ordering
The examples used in the instructions below changes the order of Flexible Authentication Ordering so that
MAB is attempted before IEEE 802.1X authentication (dot1x). MAB is configured as the first authentication
method, so MAB will have priority over all other authentication methods.
Before changing the default order and priority of these authentication methods, however, you should
Note
understand the potential consequences of those changes. See
iosswrel/ps6537/ps6586/ps6638/application_note_c27-573287_ps6638_Products_White_Paper.html
details.
Beginning in privileged EXEC mode, follow these steps:
SUMMARY STEPS
1. configure terminal
2. interface interface-id
3. switchport mode access
4. authentication order [ dot1x | mab ] | {webauth}
5. authentication priority [ dot1x | mab ] | {webauth}
6. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
294
Configuring IEEE 802.1x Port-Based Authentication
Purpose
(Optional) Saves your entries in the
configuration file.
http://www.cisco.com/en/US/prod/collateral/
Purpose
Enters the global configuration mode.
for
OL-29434-01