Configuring 802.1X Port-Based Authentication
Command
Step 6
Cisco IOS Release 12.2(50)SG and later
Switch(config-if)# authentication
port-control auto
Cisco IOS Release 12.2(46)SG or earlier
releases
Switch(config-if)# dot1x
port-control auto
Step 7
Switch(config-if)# end
Step 8
Switch# show dot1x all
Step 9
Switch# copy running-config
startup-config
This example shows how to set the retransmission time to 60 seconds:
Cisco IOS Release 12.2(50)SG and later
Switch# configure terminal
Switch(config)# interface fastethernet5/9
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x pae authenticator
Switch(config-if)# dot1x timeout tx-period 60
Switch(config-if)# authentication port-control auto
Switch(config-if)# end
Switch#
Cisco IOS Release 12.2(46)SG or earlier
Switch# configure terminal
Switch(config)# interface fastethernet5/9
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x pae authenticator
Switch(config-if)# dot1x timeout tx-period 60
Switch(config-if)# dot1x port-control auto
Switch(config-if)# end
Switch#
Setting the Switch-to-Client Frame-Retransmission Number
In addition to changing the switch-to-client retransmission times, you can change the number of times that the switch sends
EAP-Request/Identity and other EAP-Request frames to the client before restarting the authentication process. The number of
EAP-Request/Identity retransmissions is controlled by the dot1x max-reauth-req command; the number of retransmissions
for other EAP-Request frames is controlled by the dot1x max-req command.
You should change the default values of these commands only to adjust for unusual circumstances such
Note
as unreliable links or specific behavioral problems with certain clients and authentication servers.
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
49-86
Chapter 49
Purpose
Enables 802.1X authentication on the interface.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
Configuring 802.1X Port-Based Authentication