Reference Guide

802.1X | 97
Configuring 802.1X
Configuring 802.1X on a port is a two-step process:
1. Enable 802.1X globally. See page 97.
2. Enable 802.1X on an interface. See page 97.
Related Configuration Tasks
• Configuring Request Identity Re-transmissions on page 99
• Configuring Port-control on page 101
• Re-authenticating a Port on page 102
• Configuring Timeouts on page 103
• Configuring a Guest VLAN on page 106
• Configuring an Authentication-fail VLAN on page 106
Important Points to Remember
• FTOS supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and
MS-CHAPv2 with PEAP.
• E-Series, C-Series, and S-Series support only RADIUS as the authentication server.
• 802.1X is not supported on port-channels or port-channel members.
Enabling 802.1X
802.1X must be enabled globally and at interface level.