Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

dot1xChapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsdot1xUse the dot1x global configuration command on the switch stack or on a standalone switch to globallyenable IEEE 802.1x authentication. Use the no form of this command to return to the default setting.dot1x {guest-vlan supplicant} | {system-auth-control}no dot1x {guest-vlan supplicant} | {system-auth-control}NoteThough visible in the command-line help strings, the credentials name keywords are not supported.Syntax Descriptionguest-vlan supplicantsystem-auth-controlEnable optional guest VLAN behavior globally on the switch.Enable IEEE 802.1x authentication globally on the switch.DefaultsIEEE 802.1x authentication is disabled, and the optional guest VLAN behavior is disabled.Command ModesGlobal configurationCommand HistoryRelease12.2(35)SE2ModificationThis command was introduced.Usage GuidelinesYou must enable authentication, authorization, and accounting (AAA) and specify the authenticationmethod list before globally enabling IEEE 802.1x authentication. A method list describes the sequenceand authentication methods to be used to authenticate a user.Before globally enabling IEEE 802.1x authentication on a switch, remove the EtherChannelconfiguration from the interfaces on which IEEE 802.1x authentication and EtherChannel areconfigured.If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1xauthentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that thedevice is running ACS Version 3.2.1 or later.You can use the guest-vlan supplicant keywords to enable the optional IEEE 802.1x guest VLANbehavior globally on the switch. For more information, see the dot1x guest-vlan command.2-146Catalyst 3750-E and 3560-E Switch Command ReferenceOL-9776-08