Users Guide

Security Commands 979
The available authentication methods are dot1x, MAB, and captive portal.
Ordering sets the order of authentication methods that the switch attempts
when trying to authenticate a new device. If one method is unsuccessful or
times out, the next method in the list is attempted.
For a laptop or desktop and phone combination where both devices
authenticate using IEEE 802.1X, it is recommended to configure both the
order and priority as dot1x.
Example
console(config-if-Gi1/0/1)# authentication order dot1x mab captive-portal
console(config-if-Gi1/0/1)# no authentication order
authentication priority
Use this command to set the priority for the re-authentication methods used
on a port.
Use the no form of this command to return the port to the default order of
priority for the authentication methods.
Syntax
authentication priority {[dot1x|mab|captive-portal] [mab|dot1x|captive-
portal] [mab|dot1x|captive-portal]}
no authentication priority
Default Configuration
The default authentication priority is dot1x, MAB, captive portal.
Command Modes
Interface Configuration (Ethernet) mode.
User Guidelines
The authentication priority selects the methods used when a client is re-
authenticated. The available authentication methods are dot1x, MAB, and
captive portal. Captive portal is always the last method in the list.