Administrator Guide

All platforms support only RADIUS as the authentication server.
If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server, if
configured.
802.1X is not supported on port-channels or port-channel members.
802.1X is not supported on a port when you configure the port as cascaded.
The NAS-Port-Type attribute indicates the type of the physical port of the NAS which is authenticating the user. It is used in
Access-Request packets. The value of this attribute is set as Ethernet (15) for both EAP and MAB supplicants.
Enabling 802.1X
Enable 802.1X globally.
Figure 6. 802.1X Enabled
1. Enable 802.1X globally.
CONFIGURATION mode
dot1x authentication
2. Enter INTERFACE mode on an interface or a range of interfaces.
INTERFACE mode
interface [range]
3. Enable 802.1X on the supplicant interface only.
INTERFACE mode
dot1x authentication
802.1X
87