802.1x Commands 371
802.1x Commands

aaa authentication dot1x

The
aaa authentication dot1x
Global Configuration mode command specifies one or more
authentication, authorization, and accounting (AAA) methods for use to authenticate interfaces
running IEEE 802.1X. Use the
no
form of this command to return to default.
Syntax
aaa authentication dot1x default
method1
[
method2
...]
no aaa authentication dot1x default
•
method1
[
method2
...]—At least one from the following table:
Default Configuration
The default behavior of the "aaa authentication" for dot1.x is "failed to authenticate". If the
8021.x calls the AAA for authentication services it will receive a fail status.
Command Mode
Global configuration mode
User Guidelines
• The additional methods of authentication are used only if the previous method returns an
error, for example the authentication server is down, and not if the request for authenticate is
denied access. To ensure that the authentication succeeds even if all methods return an error,
specify
none
as the final method in the command line.
• The radius server must support MD-5 challenge and EAP type frames.
Examples
The following example uses the
aaa authentication dot1x default
command with no
authentication.
Keyword Description
Radius Uses the list of all RADIUS servers for
authentication
None Uses no authentication
Console (config)# aaa authentication dot1x default none