Configuring IEEE 802.1x Authentication
Beginning in privileged EXEC mode, follow these steps to enable the optional guest VLAN behavior
and to configure a guest VLAN. This procedure is optional.
Command
Step 1
configure terminal
Step 2
dot1x guest-vlan supplicant
Step 3
interface interface-id
Step 4
switchport mode access
Step 5
dot1x port-control auto
Step 6
dot1x guest-vlan vlan-id
Step 7
end
Step 8
show dot1x interface interface-id
Step 9
copy running-config startup-config
To disable the optional guest VLAN behavior, use the no dot1x guest-vlan supplicant global
configuration command. To remove the guest VLAN, use the no dot1x guest-vlan interface
configuration command. The port returns to the unauthorized state.
This example shows how enable the optional guest VLAN behavior and to specify VLAN 5 as an IEEE
802.1x guest VLAN:
Switch(config)# dot1x guest-vlan supplicant
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# dot1x guest-vlan 5
Resetting the IEEE 802.1x Configuration to the Default Values
Beginning in privileged EXEC mode, follow these steps to reset the IEEE 802.1x configuration to the
default values.
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
dot1x default
Step 4
end
Step 5
show dot1x interface interface-id
Step 6
copy running-config startup-config
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
9-22
Chapter 9
Purpose
Enter global configuration mode.
Enable the optional guest VLAN behavior globally on the switch.
Specify the port to be configured, and enter interface configuration mode.
For the supported port types, see the
Guidelines" section on page
Set the port to access mode.
Enable IEEE 802.1x authentication on the port.
Specify an active VLAN as an IEEE 802.1x guest VLAN. The range is 1
to 4094.
You can configure any active VLAN except an RSPAN VLAN or a voice
VLAN as an IEEE 802.1x guest VLAN.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the interface to be configured, and enter interface configuration
mode.
Reset the configurable IEEE 802.1x parameters to the default values.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring IEEE 802.1x Port-Based Authentication
"IEEE 802.1x Configuration
9-12.
78-11380-12