13-41
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 13 Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Step 6 dot1x max-reauth-req count (Optional) Sets the number of times that the switch sends an
EAP-request/identity frame to the client before restarting the
authentication process. The range is 1 to 10; the default is 2.
Note You should change the default value of this command only to
adjust for unusual circumstances such as unreliable links or
specific behavioral problems with certain clients and
authentication servers.
Step 7 dot1x max-req count (Optional) Sets the number of times that the switch restarts the
authentication process before the port changes to the unauthorized state.
The range is 0 to 10; the default is 2.
Step 8 authentication control-direction {both
| in}
(Optional) Enables 802.1x authentication with WoL on the port, and uses
these keywords to configure the port as bidirectional or unidirectional.
• both—Sets the port as bidirectional. The port cannot receive packets
from or send packets to the host. By default, the port is bidirectional.
• in—Sets the port as unidirectional. The port can send packets to the
host but cannot receive packets from the host.
Step 9 authentication order [mab] {webauth}(Optional) Sets the order of authentication methods.
• mab—Adds MAC authentication bypass (MAB) to the order of
authentication methods.
• webauth—Adds web authentication to the order of authentication
methods.
Step 10 authentication order [dot1x | mab] |
{webauth}
(Optional) Sets the order of authentication methods used on a port.
Step 11 authentication priority [dot1x | mab] |
{webauth}
(Optional) Adds an authentication method to the port-priority list.
Step 12 dot1x default Resets the 802.1x parameters to the default values.
Step 13 end Returns to privileged EXEC mode.
Step 14 show authentication interface
interface-id
Verifies your entries.
Step 15 copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose