Cisco Systems 3560 Configuring MAC Authentication Bypass

10-52
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
To disable 802.1x authentication with WoL, use the no authentication control-direction or no dot1x
control-direction interface configuration command.
These examples show how to enable 802.1x authentication with WoL and set the port as bidirectional:
Switch(config-if)# authentication control-direction both
or
Switch(config-if)# dot1x control-direction both
Configuring MAC Authentication Bypass
Beginning in privileged EXEC mode, follow these steps to enable MAC authentication bypass. This
procedure is optional.
Step 3 authentication control-direction {both
| in}
or
dot1x control-direction {both | in}
Enable 802.1x authentication with WoL on the port, and use these
keywords to configure the port as bidirectional or unidirectional.
• both—Sets the port as bidirectional. The port cannot receive packets
from or send packets to the host. By default, the port is bidirectional.
• in—Sets the port as unidirectional. The port can send packets to the
host but cannot receive packets from the host.
Step 4 end Return to privileged EXEC mode.
Step 5 show authentication interface
interface-id
or
show dot1x interface interface-id
Verify your entries.
Step 6 copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Command Purpose
Step 1 configure terminal Enter global configuration mode.
Step 2 interface interface-id Specify the port to be configured, and enter interface configuration mode.
For the supported port types, see the “802.1x Authentication
Configuration Guidelines” section on page 10-31.
Step 3 authentication port-control auto
or
dot1x port-control auto
Enable 802.1x authentication on the port.