Users Guide

Security Commands 952
Example
console(config-if-Gi1/0/1)# authentication order dot1x mab captive-portal
console(config-if-Gi1/0/1)# no authentication order
authentication priority
Use this command to set the priority for the re-authentication methods used
on a port.
Use the no form of this command to return the port to the default order of
priority for the authentication methods.
Syntax
authentication priority {[dot1x|mab|captive-portal] [mab|dot1x|captive-
portal] [mab|dot1x|captive-portal]}
no authentication priority
Default Configuration
The default authentication priority is dot1x, MAB, captive portal.
Command Modes
Interface Configuration (Ethernet) mode.
User Guidelines
The authentication priority selects the methods used when a client is re-
authenticated. The available authentication methods are dot1x, MAB, and
captive portal. Captive portal is always the last method in the list.
Each method can only be entered once. There are no restrictions on the
ordering of priorities.
For a laptop or desktop and phone combination where both devices
authenticate using IEEE 802.1X, it is recommended to configure both the
authentication priority and order as dot1x.
Example
console(config-if-Gi1/0/1)# authentication priority mab dot1x captive-portal
console(config-if-Gi1/0/1)# no authentication priority