Cisco Catalyst 2960-XR User Manual

PurposeCommand or Action
Returns to privileged EXEC mode.end
Example:
Switch(config-if)# end
Step 7
Configuring the Inaccessible Authentication Bypass Feature
You can configure the inaccessible bypass feature, also referred to as critical authentication or the AAA fail
policy.
Beginning in privileged EXEC mode, follow these steps to configure the port as a critical port and enable the
inaccessible authentication bypass feature. This procedure is optional.
SUMMARY STEPS
1.
configure terminal
2.
radius-server dead-criteria time time tries tries
3.
radius-server deadtime minutes
4.
radius-server host ip-address [acct-port udp-port] [auth-port udp-port][ test username name [idle-time
time] [ignore-acct-port] [ignore-auth-port]] [key string]
5.
dot1x critical {eapol | recovery delay milliseconds}
6.
interface interface-id
7.
authentication event server dead action {authorize | reinitialize} vlan vlan-id]
8.
dot1x critical [recovery action reinitialize | vlan vlan-id]
9.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
(Optional) Sets the conditions that are used to decide when a RADIUS server
is considered unavailable or dead.
radius-server dead-criteria time time
tries tries
Step 2
Example:
Switch(config)# radius-server
The range for time is from 1 to 120 seconds. The switch dynamically determines
the default seconds value that is 10 to 60 seconds.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
274 OL-29434-01
Configuring IEEE 802.1x Port-Based Authentication
Configuring the Inaccessible Authentication Bypass Feature

Cisco Catalyst 2960-XR Specifications

General

Brand	Cisco
Model	Catalyst 2960-XR
Category	Switch
Language	English