How to Configure 802.1x Port-Based Authentication
Command or Action
Step 5
end
Example:
Switch(config-if)# end
Configuring a Restricted VLAN
When you configure a restricted VLAN on a switch stack or a switch, clients that are IEEE 802.1x-compliant
are moved into the restricted VLAN when the authentication server does not receive a valid username and
password. The switch supports restricted VLANs only in single-host mode.
Beginning in privileged EXEC mode, follow these steps to configure a restricted VLAN. This procedure is
optional.
SUMMARY STEPS
1. configure terminal
2. interface interface-id
3. Use one of the following:
4. authentication port-control auto
5. authentication event fail action authorize vlan vlan-id
6. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2
interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/2
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1380
• switchport mode access
• switchport mode private-vlan host
Purpose
Returns to privileged EXEC mode.
Purpose
Enters the global configuration mode.
Specifies the port to be configured, and enter interface
configuration mode.