Enabling And Initializing 802.1X Authentication For Individual Ports - Cisco WS-C2950SX-48-SI Configuration Manual

Chapter 31 Configuring 802.1x Authentication
To globally disable 802.1x authentication, perform this task in privileged mode:
Task
Globally disable 802.1x.
This example shows how to globally disable 802.1x authentication:
Console> (enable) set dot1x system-auth-control disable
dot1x system-auth-control disabled.

Enabling and Initializing 802.1x Authentication for Individual Ports

After 802.1x authentication is globally enabled, you can enable and initialize 802.1x authentication from
the console only for individual ports. To globally enable 802.1x authentication, see the
Globally" section on page
You must specify at least one RADIUS server before you can enable 802.1x authentication on the switch.
Note
For information on specifying a RADIUS server, see the
page
To enable and initialize 802.1x authentication for access to the switch, perform this task in privileged
mode:
Task
Step 1
Enable 802.1x control on a specific port.
Step 2
Initialize 802.1x on the same port.
Step 3 Verify the 802.1x configuration.
This example shows how to enable 802.1x authentication on port 1 in module 4, initialize 802.1x
authentication on the same port, and verify the configuration:
Console> (enable) set port dot1x 4/1 port-control auto
Port 4/1 dot1x port-control is set to auto.
Trunking disabled for port 4/1 due to Dot1x feature.
Spantree port fast start option enabled for port 4/1.
Console> (enable) set port dot1x 4/1 initialize
Port 4/1 initializing...
Port 4/1 dot1x initialization complete.
Console> show port dot1x 4/1
Port
----- ------------------- ---------- ------------------- -------------
4/1
Port
----- ------------- -----------------
4/1
78-15486-01
31-8.
30-23.
Auth-State BEnd-State Port-Control
connecting finished
Multiple-Host Re-authentication
disabled disabled
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
Configuring 802.1x Authentication on the Switch
Command
set dot1x system-auth-control disable
"Specifying RADIUS Servers" section on
Command
set port dot1x mod/port port-control auto
set port dot1x mod/port initialize
show port dot1x mod/port
Port-Status
auto unauthorized
"Enabling 802.1x
—
Release 8.1
31-9