Dot1X - Cisco Catalyst 2960 Command Reference Manual

Hide thumbs Also See for Catalyst 2960:

Table of Contents

dot1x

Use the dot1x global configuration command to globally enable IEEE 802.1x authentication. Use the no

form of this command to return to the default setting.

Though visible in the command-line help strings, the credentials name keywords are not supported.

Syntax Description

critical {eapol |

recovery delay

milliseconds}

system-auth-control

IEEE 802.1x authentication is disabled.

Command Modes

Global configuration

Command History

Usage Guidelines

You must enable authentication, authorization, and accounting (AAA) and specify the authentication

method list before globally enabling IEEE 802.1x authentication. A method list describes the sequence

and authentication methods to be used to authenticate a user.

Before globally enabling IEEE 802.1x authentication on a switch, remove the EtherChannel

configuration from the interfaces on which IEEE 802.1x authentication and EtherChannel are

If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x

authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the

device is running ACS Version 3.2.1 or later.

Catalyst 2960 Switch Command Reference

dot1x {critical {eapol | recovery delay milliseconds} | system-auth-control}

no dot1x {credentials | critical {eapol | recovery delay} | system-auth-control}

Configure the inaccessible authentication bypass parameters. For more

information, see the

Enable IEEE 802.1x authentication globally on the switch.

Modification

This command was introduced.

The critical {eapol | recovery delay milliseconds} keywords were added.

Catalyst 2960 Switch Cisco IOS Commands

dot1x critical (global configuration)

Show Quick Links

Table of Contents