CLI Guide

Security Commands 951
Default Configuration
By default, unauthenticated devices on 802.1X enabled interfaces may only
send and receive DHCP/BOOTP packets.
Command Modes
Interface (Ethernet) Configuration mode
User Guidelines
This command allows devices on 802.1X enabled interfaces to access network
resources. An administrator-configured ACL enabled on the interface may be
used to restrict network access until the device is authorized.
Command History
Syntax added in version 6.6 firmware.
Example
The following example allows open access to all network resources when no
ACL is configured and enabled on the interface.
console(config-Gi1/0/1)# authentication open
authentication order
This command sets the order of authentication methods used on a port. The
available authentication methods are Dot1x, MAB, and captive portal.
Ordering sets the order of methods that the switch attempts when trying to
authenticate a new device connected to a port. If one method is unsuccessful
or timed out, the next method is attempted.
Use the no form of this command to return the port to the default
authentication order.
Syntax
authentication order {dot1x [mab][captive-portal] | mab [dot1x] [captive-
portal] | captive-portal}
no authentication order