Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
Configuring Switch Ports as 802.1X
Authenticators
802.1X Authentication Commands Page
[no] aaa port-access authenticator < [ethernet] < port-list > 10-15
[control | client-limit | quiet-period | tx-period | supplicant-timeout | 10-15
server-timeout | max-requests | reauth-period | auth-vid |
unauth-period | unauth-vid | initialize | reauthenticate |
clear-statistics | logoff-period]
aaa authentication port-access
10-19
< local | eap-radius | chap-radius >
[no] aaa port-access authenticator active
10-15
[no] port-security [ethernet] < port-list > learn-mode port-access 10-36
802.1X Open VLAN Mode Commands 10-21
802.1X Supplicant Commands 10-38
802.1X-Related Show Commands 10-42
RADIUS server configuration 10-20
1. Enable 802.1X Authentication on Selected Ports
This task configures the individual ports you want to operate as 802.1X
authenticators for point-to-point links to 802.1X-aware clients or switches.
(Actual 802.1X operation does not commence until you perform step
5 on page
10-14 to activate 802.1X authentication on the switch.)
Not e If you enable 802.1X authentication on a port, the switch automatically dis-
ables LACP on that port. However, if the port is already operating in an LACP
trunk, you must remove the port from the trunk before you can configure it
for 802.1X authentication.
10-15