Authentication Order - Cisco Catalyst 4500 Series Command Reference Manual

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches

authentication order

To specify the order in which authentication methods should be attempted for a client on an interface,
use the authentication order command in interface configuration mode. To return to the default
settings, use the no form of this command.
Syntax Description
method1
method2
method3
Command Default
The default order is dot1x, MAB, then WebAuth.
Command Modes
Interface configuration mode
Command History Release
12.2(50)SG
Usage Guidelines
Once you enter the authentication order command, only those methods explicitly listed will run. Each
method may be entered only once in the run list and no methods may be entered after you enter the
webauth keyword.
Authentication methods are applied in the configured (or default) order until authentication succeeds.
For authentication fails, failover to the next authentication method occurs (subject to the configuration
of authentication event handling).
You can verify your settings with the show authentication privileged EXEC command.
OL-25342 -01
authentication order method1 [method2] [method3]
no authentication order
Authentication method to be attempted. The valid values are as follows:
•
•
•
(Optional) Authentication method to be attempted. The valid values are as
follows:
•
•
•
Modification
Support for this command was introduced.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
dot1x—Adds the dot1x authentication method.
mab—Adds the MAB authentication method.
webauth—Adds the WebAuth authentication method.
dot1x—Adds the dot1x authentication method.
mab—Adds the MAB authentication method.
webauth—Adds the WebAuth authentication method.
authentication order
2-33