Configuring 802.1X Authentication On The Switch; Enabling 802.1X Globally; Disabling 802.1X Globally; Enabling And Initializing 802.1X Authentication For Individual Ports - Cisco WS-C2948G-GE-TX Configuration Manual

Configuring 802.1x Authentication on the Switch

•
Configuring 802.1x Authentication on the Switch
The following sections describe how to configure 802.1x authentication on the switch.

Enabling 802.1x Globally

You must enable 802.1x authentication for the entire system before configuring it for individual ports.
After you globally enable 802.1x authentication, you can configure individual ports for 802.1x
authentication if they meet the specific requirements that are required by 802.1x. To enable 802.1x
authentication for individual ports, see the
Individual Ports" section on page
To globally enable 802.1x authentication, perform this task in privileged mode:
Task
Globally enable 802.1x.
This example shows how to globally enable 802.1x authentication:
Console> (enable) set dot1x system-auth-control enable
dot1x system-auth-control enabled.

Disabling 802.1x Globally

When you enable 802.1x authentication for the entire system, you can disable it globally. When you
disable 802.1x authentication globally, it is no longer available at any port, even ports that were
previously configured for it.
To globally disable 802.1x authentication, perform this task in privileged mode:
Task
Globally disable 802.1x.
This example shows how to globally disable 802.1x authentication:
Console> (enable) set dot1x system-auth-control disable
dot1x system-auth-control disabled.

Enabling and Initializing 802.1x Authentication for Individual Ports

After you enable 802.1x authentication globally, you can enable and initialize 802.1x authentication
from the console only for individual ports. For more information, see the
section on page
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
31-10
Do not assign a guest VLAN that is equal to an auxiliary VLAN because an 802.1x-enabled
auxiliary VLAN port will not be put into the guest VLAN if the auxiliary VLAN on the port is the
same as the guest VLAN.
31-10.
"Enabling and Initializing 802.1x Authentication for
31-10.
Command
set dot1x system-auth-control enable
Command
set dot1x system-auth-control disable
Chapter 31 Configuring 802.1x Authentication
"Enabling 802.1x Globally"
78-15908-01