Specifications

2-29
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738-01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
authentication order
authenticatio n order
To specify the order in which authentication methods should be attempted for a client on an interface,
use the auth entic ation or der command in interface configuration mode. To return to the default
settings, use the no form of this command.
authentication order method1 [method2] [method3]
no authentication order
Syntax Description
Command Default The default order is dot1x, MAB, the n WebAuth.
Command Modes Interface configur ation mode
Usage Guidelines Once you enter the authentication o rder command, only those methods explicitly listed will run. Each
method may be entered only once in the run list and no methods may be entere d after you enter the
webauth keyword.
Authentication methods are applied in the configured (or default) order until authentication succeeds.
For authentication fails, failover to the next authentication method o ccurs (subject to the configuration
of authentication event handling).
You can verify your settings with the show authentication privileged EXEC command.
Examples The following example shows how to specify the order in which authentication methods should be
attempted for a client on an interface:
Switch(config-if)# authentication order mab dot1x webauth
Switch(config-if)#
Related Commands
method1 Authentication method to be attempted. The valid values are as follows:
• dot1x—Adds the dot1x authenticati on method.
• mab—Adds the MAB authentication method.
• webauth—Adds the WebAuth authentication method.
method2
method3
(Optional) Authentication method to be attempted. The valid values are as
follows:
• dot1x—Adds the dot1x authenticati on method.
• mab—Adds the MAB authentication method.
• webauth—Adds the WebAuth authentication method.
Command Description
show authentication Displays Authentication Manager information.