802.1x Commands 515
802.1x Commands
aaa authentication dot1x
The aaa authentication dot1x Global Configuration mode command specifies one or more
authentication, authorization, and accounting (AAA) methods for use on interfaces running IEEE
802.1X. Use the no form of this command to return to the default configuration.
Syntax
•
aaa authentication dot1x default
method1
[
method2
...]
• no aaa authentication dot1x default
•
method1
[
method2
...] — At least one from the following table:
Default Configuration
No authentication method is defined.
Command Mode
Global Configuration mode.
User Guidelines
• Additional methods of authentication are used only if the previous method returns an error and
not if the request for authentication is denied. To ensure that authentication succeeds even if all
methods return an error, specify
none
as the final method in the command line.
• The RADIUS server must support MD-5 challenge and EAP type frames.
• The device accepts EAP frames with a priority tag and also accepts EAP packets with VLAN tags.
Keyword Description
Radius Uses the list of all RADIUS servers for
authentication
None Uses no authentication
book.book Page 515 Thursday, December 18, 2008 7:40 PM