Users Guide

Security Commands 978
User Guidelines
This command allows devices on 802.1X enabled interfaces to access network
resources. An administrator-configured ACL enabled on the interface may be
used to restrict network access until the device is authorized.
Command History
Syntax added in version 6.6 firmware.
Example
The following example allows open access to all network resources when no
ACL is configured and enabled on the interface.
console(config-Gi1/0/1)# authentication open
authentication order
This command sets the order of authentication methods used on a port.
Use the no form of this command to return the port to the default
authentication order.
Syntax
authentication order {dot1x [mab][captive-portal] | mab [dot1x] [captive-
portal] | captive-portal}
no authentication order
Default Configuration
The default authentication order is dot1x, MAB, captive portal.
Command Modes
Interface Configuration (Ethernet) mode
User Guidelines
Each method can only be entered once. Ordering is only possible between
802.1x and MAB. Captive portal can be configured either as a stand-alone
method or as the last method in the order.