2-43
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
authentication order
authentication order
Use the authentication order interface configuration command to set the order of authentication
methods used on a port.
authentication order [dot1x | mab] {webauth}
no authentication order
Syntax Description
Command Default The default authentication order is dot1x followed by mab and webauth.
Command Modes Interface configuration
Command History
Usage Guidelines Ordering sets the order of methods that the switch attempts when trying to authenticate a new device
connected to a port. If one method in the list is unsuccessful, the next method is attempted.
Each method can only be entered once. Flexible ordering is only possible between 802.1x and MAB.
Web authentication can be configured as either a standalone method or as the last method in the order
after either 802.1x or MAB. Web authentication should be configured only as fallback to dot1x or mab.
Examples This example shows how to add 802.1x as the first authentication method, MAB as the second method,
and web authentication as the third method:
Switch(config-if)# authentication order dotx mab webauth
This example shows how to add MAC authentication Bypass (MAB) as the first authentication method
and web authentication as the second authentication method:
Switch(config-if)# authentication order mab webauth
You can verify your settings by entering the show authentication privileged EXEC command.
dot1x Add 802.1x to the order of authentication methods.
mab Add MAC authentication bypass (MAB) to the order of authentication
methods.
webauth Add web authentication to the order of authentication methods.
Release Modification
12.2(53)SE2 This command was introduced.