Users Guide

Security Commands 872
• ias— Uses the internal authentication server. Only EAP-MD5 authentication is
supported for the internal authentication server.
• none— Uses no authentication.
Default Configuration
No default authentication method is defined.
Command Mode
Global Configuration mode
User Guidelines
Only one authentication method may be specified in the command. For the
RADIUS authentication method, if the RADIUS server cannot be contacted,
the supplicant fails authentication. The none method always allows access.
the ias method utilizes the internal authentication server. The internal
authentication server only supports the EAP-MD5 method.
Example
The following example configures 802.1x authentication to use no
authentication. Absent any other configuration, this command allows all
802.1x users to pass traffic through the switch.
console(config)# aaa authentication dot1x default none
The following example configures 802.1x authentication to use a RADIUS
server. A RADIUS server must be configured previously using the radius
server host auth command for the radius method to succeed.
console(config)#aaa authentication dot1x default radius
aaa authentication enable
Use the aaa authentication enable command in Global Configuration mode
to set authentication for accessing higher administrator privilege levels when
logged in to the switch console. To return to the default configuration, use
the no form of this command.
Syntax
aaa authentication enable {default | list-name} {method1 [method2...]}