Cisco WS-X6066-SLB-APC - Content Switching Module Software Manual page 451

Chapter 21 Configuring Switch Access Using AAA
This example shows how to globally enable 802.1x authentication:
Console> (enable) set dot1x system-auth-control enable
dot1x system-auth-control enabled.
Disabling 802.1x Globally
When 802.1x authentication is enabled for the entire system, you can disable it globally. When 802.1x
authentication is disabled globally, it is no longer available at any port, even ports that were previously
configured for it.
To globally disable 802.1x authentication, perform this task in privileged mode:
Task
Globally disable 802.1x.
This example shows how to globally disable 802.1x authentication:
Console> (enable) set dot1x system-auth-control disable
dot1x system-auth-control disabled.
Enabling and Initializing 802.1x Authentication for Individual Ports
After 802.1x authentication is globally enabled, you must enable and initialize 802.1x authentication
from the console for individual ports. To globally enable 802.1x authentication, see the
Globally" section on page
Note You must specify at least one RADIUS server before you can enable 802.1x authentication on the
switch. For information on specifying a RADIUS server, see the
section on page
To enable and initialize 802.1x authentication for access to the switch, perform this task in privileged
mode:
Task
Step 1
Enable 802.1x control on a specific port.
Step 2 Initialize 802.1x on the same port.
Step 3 Verify the 802.1x configuration.
This example shows how to enable 802.1x authentication on port 1 in module 4, initialize 802.1x
authentication on the same port, and verify the configuration:
Console> (enable) set port dot1x 4/1 port-control auto
Port 4/1 dot1x port-control is set to auto.
Trunking disabled for port 4/1 due to Dot1x feature.
Spantree port fast start option enabled for port 4/1.
Console> (enable) set port dot1x 4/1 initialize
Port 4/1 initializing...
Port 4/1 dot1x initialization complete.
78-13315-02
21-40.
21-24.
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
Command
set dot1x system-auth-control disable
"Specifying RADIUS Servers"
Command
set port dot1x mod/port port-control auto
set port dot1x mod/port initialize
show port dot1x mod/port
Configuring Authentication
"Enabling 802.1x
21-41