Configure Interface and Enable 8021x

switch(config-if)#

switchport mode access / no switchport

■ Configure port as an access port

switch(config-if)#

dot1x

port-control

[force-authorized |

force-

-unauthorized

| auto]

■ Enable IEEE 802.1x authentication on the port switch(config-if)#

dot1x host-mode multi-host

■ (Optional) Allow multiple clients on an IEEE 802.1x-authorized port

© 2007 Cisco Systems, Inc. All rights reserved. SNRS V2.0—2-25

Configure the interface using the following commands:

■ switchport mode access

IEEE 802.1x can only be configured on static Layer 2 access ports.

■ dot1x port-control [force-authorized | force-unauthorized | auto]

This command enables IEEE 802.1x authentication on the port. The default is force-authorized.

■ (Optional) dot1x host-mode multi-host

This command allows multiple hosts on an IEEE 802.1x-authorized port.

© 2007 Cisco Systems, Inc. Trust and Identity 2-109

0 0

Post a comment