Users Guide

Security Commands 1126
console(config-radius-da)# client 2.2.2.2
console(config-radius-da)# server-key 0 “Keep it. Keep it.”
console(config-radius-da)# port 3799
console(config-radius-da)# auth-type any
console(config-radius-da)# exit
console(config)#dot1x system-auth-control
console(config)#clear authentication sessions
dot1x user
Use this command to add an IAS or administrator user ID to the list of users
allowed to authenticate on an interface.
Syntax
dot1x user { user-id [ interface-id | all ]}
no dot1x user { user-id }
•
ias-user-id —The user name of a configured IAS user or switch
administrator.
•
interface-id —An interface (Ethernet) identifier.
• all—All interfaces (Ethernet).
Default Configuration
By default, newly configured users are authorized to authenticate on all
interfaces. Use the no dot1x user
username all command to remove the user
from all ports and then use the dot1x user username <
interface-id > to add
the user to specific ports.
Command Mode
Global Configuration mode
User Guidelines
Use this command to restrict authentication to a subset of interfaces. The list
is maintained per interface. Use the command once for each interface on
which the user is allowed to authenticate.
Command History
Command introduced in version 6.6 firmware.