Cisco Catalyst 3750-X Command Reference

2-172
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
dot1x
dot1x
Use the dot1x global configuration command on the switch stack or on a standalone switch to globally
enable IEEE 802.1x authentication. Use the no form of this command to return to the default setting.
dot1x {guest-vlan supplicant} | {system-auth-control}
no dot1x {guest-vlan supplicant} | {system-auth-control}
Note Though visible in the command-line help strings, the credentials name keywords are not supported.
Syntax Description
Defaults IEEE 802.1x authentication is disabled, and the optional guest VLAN behavior is disabled.
Command Modes Global configuration
Command History
Usage Guidelines You must enable authentication, authorization, and accounting (AAA) and specify the authentication
method list before globally enabling IEEE 802.1x authentication. A method list describes the sequence
and authentication methods to be used to authenticate a user.
Before globally enabling IEEE 802.1x authentication on a switch, remove the EtherChannel
configuration from the interfaces on which IEEE 802.1x authentication and EtherChannel are
configured.
If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x
authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the
device is running ACS Version 3.2.1 or later.
You can use the guest-vlan supplicant keywords to enable the optional IEEE 802.1x guest VLAN
behavior globally on the switch. For more information, see the dot1x guest-vlan command.
guest-vlan supplicant Enable optional guest VLAN behavior globally on the switch.
system-auth-control Enable IEEE 802.1x authentication globally on the switch.
Release Modification
12.2(53)SE2 This command was introduced.

Cisco Catalyst 3750-X Specifications

General

Brand	Cisco
Model	Catalyst 3750-X
Category	Switch
Language	English