DETAILED STEPS
PurposeCommand or Action
Enables the 802.1x readiness check on the switch.
dot1x test eapol-capable [interface interface-id]
Step 1
Example:
Switch# dot1x test eapol-capable interface
gigabitethernet1/0/13
(Optional) For interface-id specify the port on which to check
for IEEE 802.1x readiness.
If you omit the optional interface keyword, all interfaces
on the switch are tested.
Note
(Optional) Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
(Optional) Configures the timeout used to wait for EAPOL
response. The range is from 1 to 65535 seconds. The default is
10 seconds.
dot1x test timeout timeout
Example:
Switch(config)# dot1x test timeout 300
Step 3
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 4
Related Topics
802.1x Readiness Check, on page 226
Configuring Voice Aware 802.1x Security
Follow these guidelines to configure voice aware 802.1x voice security on the switch:
•
You enable voice aware 802.1x security by entering the errdisable detect cause security-violation
shutdown vlan global configuration command. You disable voice aware 802.1x security by entering
the no version of this command. This command applies to all 802.1x-configured ports in the switch.
If you do not include the shutdown vlan keywords, the entire port is shut down when
it enters the error-disabled state.
Note
•
If you use the errdisable recovery cause security-violation global configuration command to configure
error-disabled recovery, the port is automatically re-enabled. If error-disabled recovery is not configured
for the port, you re-enable it by using the shutdown and no shutdown interface configuration commands.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
248 OL-29434-01
Configuring IEEE 802.1x Port-Based Authentication
Configuring Voice Aware 802.1x Security