Authentication Configuration Guidelines; Configuring 802.1X Authentication On The Switch; Enabling 802.1X Globally; Disabling 802.1X Globally - Cisco WS-C2950SX-48-SI Configuration Manual

Authentication Configuration Guidelines

Authentication Configuration Guidelines
This section provides the guidelines for configuring 802.1x authentication on the switch:
•
•
•
•
•
•

Configuring 802.1x Authentication on the Switch

The following sections describe how to configure 802.1x authentication on the switch.

Enabling 802.1x Globally

You must enable 802.1x authentication for the entire system before configuring it for individual ports.
After you globally enable 802.1x authentication, you can configure individual ports for 802.1x
authentication if they meet the specific requirements that are required by 802.1x. To enable 802.1x
authentication for individual ports, see the
Individual Ports" section on page
To globally enable 802.1x authentication, perform this task in privileged mode:
Task
Globally enable 802.1x.
This example shows how to globally enable 802.1x authentication:
Console> (enable) set dot1x system-auth-control enable
dot1x system-auth-control enabled.

Disabling 802.1x Globally

When 802.1x authentication is enabled for the entire system, you can disable it globally. When 802.1x
authentication is disabled globally, it is no longer available at any port, even ports that were previously
configured for it.
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
31-8
802.1x will work with other protocols, but we recommend that you use RADIUS with a remotely
located authentication server.
802.1x is supported only on Ethernet ports.
You cannot enable 802.1x on a trunk port until you turn off the trunking feature on that port. You
cannot enable trunking on an 802.1x port.
You cannot enable 802.1x on a dynamic port until you turn off the DVLAN feature on that port. You
cannot enable DVLAN on an 802.1x port.
You cannot enable 802.1x on a channeling port until you turn off the channeling feature on that port.
You cannot enable channeling on an 802.1x port.
You cannot enable 802.1x on a switched port analyzer (SPAN) destination port, and you cannot
configure SPAN destination on an 802.1x port. However, you can configure an 802.1x port as a
SPAN source port.
"Enabling and Initializing 802.1x Authentication for
31-9.
Command
set dot1x system-auth-control enable
Chapter 31 Configuring 802.1x Authentication
—
Release 8.1
78-15486-01