Users Guide

Security Commands 956
User Guidelines
Only one default method may be configured. If the authentication method
fails, for example, the user-supplied password does not match, the user is
denied access.
For the RADIUS authentication method, if no RADIUS server can be
contacted, the supplicant fails authentication unless a critical voice or data
VLAN is configured.
The none method always allows access to the network and should therefore
be used with caution.
The ias method utilizes the internal authentication server for authentication.
Configure the ias database with the aaa ias-user command. Authentication
via the internal authentication server only supports the EAP-MD5 method.
Command History
Syntax updated in version 6.6 firmware.
Example
The following example configures 802.1x authentication to use no
authentication. Absent any other configuration, this command allows all
802.1x users to pass traffic through the switch.
console(config)# aaa authentication dot1x default none
The following example configures 802.1x authentication to use a RADIUS
server. A RADIUS server must be configured previously using the radius
server host auth command for the radius method to succeed.
console(config)#aaa authentication dot1x default radius
aaa authentication enable
Use the aaa authentication enable command in Global Configuration mode
to set authentication for accessing higher administrator privilege levels when
logged in to the switch console. To return to the default configuration, use
the no form of this command.