Configuring 802.1X Authentication
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
dot1x guest-vlan vlan-id
Step 4
end
Step 5
show dot1x interface interface-id
Step 6
copy running-config startup-config
To disable and remove the guest VLAN, use the no dot1x guest-vlan interface configuration command.
The port returns to the unauthorized state.
This example shows how to enable VLAN 9 as an 802.1X guest VLAN on Fast Ethernet interface 0/1:
Switch(config)# interface fastethernet0/1
Switch(config-if)# dot1x guest-vlan 9
Resetting the 802.1X Configuration to the Default Values
Beginning in privileged EXEC mode, follow these steps to reset the 802.1X configuration to the default
values.
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
dot1x default
Step 4
end
Step 5
show dot1x interface interface-id
Step 6
copy running-config startup-config
Catalyst 3550 Multilayer Switch Software Configuration Guide
9-18
Purpose
Enter global configuration mode.
Enter interface configuration mode, and specify the interface to be
configured. For the supported interface types, see the
Configuration Guidelines" section on page
Specify an active VLAN as an 802.1X guest VLAN. The range is 1 to
4094.
Any VLAN can be configured as an 802.1X guest VLAN except internal
(routed port) VLANs, RSPAN VLANs, or voice VLANs.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Enter interface configuration mode, and specify the interface to be
configured.
Reset the configurable 802.1X parameters to the default values.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 9
Configuring 802.1X Port-Based Authentication
9-10.
"802.1X
78-11194-09