2-49
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
authentication priority
authentication priority
Use the authentication priority interface configuration command to add an authentication method to
the port-priority list.
auth priority [dot1x | mab] {webauth}
no auth priority [dot1x | mab] {webauth}
Syntax Description
Command Default The default priority is 802.1x authentication, followed by MAC authentication bypass and web
authentication.
Command Modes Interface configuration
Command History
Usage Guidelines Ordering sets the order of methods that the switch attempts when trying to authenticate a new device is
connected to a port.
When configuring multiple fallback methods on a port, set web authentication (webauth) last.
Assigning priorities to different authentication methods allows a higher-priority method to interrupt an
in-progress authentation method with a lower priority.
Note If a client is already authenticated, it might be reauthenticated if an interruption from a higher-priority
method occurs.
The default priority of an authentication method is equivalent to its position in execution-list order:
802.1x authentication, MAC authentication bypass, and web authentication. Use the dot1x, mab, and
webauth keywords to change this default order.
dot1x Add 802.1x to the order of authentication methods.
mab Add MAC authentication bypass (MAB) to the order of authentication
methods.
webauth Add web authentication to the order of authentication methods.
Release Modification
12.2(53)SE2 This command was introduced.