Users Guide

Security Commands 951
Example
The following example allows open access to all network resources when no
ACL is configured and enabled on the interface.
console(config-Gi1/0/1)# authentication open
authentication order
This command sets the order of authentication methods used on a port.
Use the no form of this command to return the port to the default
authentication order.
Syntax
authentication order {dot1x [mab][captive-portal] | mab [dot1x] [captive-
portal] | captive-portal}
no authentication order
Default Configuration
The default authentication order is dot1x, MAB, captive portal.
Command Modes
Interface Configuration (Ethernet) mode
User Guidelines
Each method can only be entered once. Ordering is only possible between
802.1x and MAB. Captive portal can be configured either as a stand-alone
method or as the last method in the order.
The available authentication methods are dot1x, MAB, and captive portal.
Ordering sets the order of authentication methods that the switch attempts
when trying to authenticate a new device. If one method is unsuccessful or
times out, the next method in the list is attempted.
For a laptop or desktop and phone combination where both devices
authenticate using IEEE 802.1X, it is recommended to configure both the
order and priority as dot1x.