Specifications

2-33
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738-01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
authentication priority
authenticatio n priority
To specify the priority of authentication methods on an interface, use the authentication priority
command in interface configuration mode. To return to the default settings, use the no form of this
command .
authentication priority method1 [method2] [method3]
no authentication priority
Syntax Description
Command Default The default order is dot1x, MAB, the n webauth.
Command Modes Interface configur ation mode
Usage Guidelines Configuring priorities for authentication methods allows a higher priority method (not currently
running) to interrupt an authentication in progress with a lower priority method. Alternatively, if the
client is already authenticated, an interrupt from a higher priority method can cau se a client, which was
previously authenticated using a lower priority method, to reauthenticate.
The default priority of a method is equivalent to its position in the order of execution list. If you do not
configure a priority, the relative priorities (highest first) are dot1x, MAB and then webauth. If you enter
the authentication o rder command, the default priorities are the same as the configured order.
You can verify your settings with the show authentication privileged EXEC command.
method1 Authentication method to be attempted. The valid values are as follows:
dot1x—Adds the dot1x authenticati on method.
mab—Adds the MAB authentication method.
webauth—Adds the Webauth authentication method.
method2
method3
(Optional) Authentication method to be attempted. The valid values are as
follows:
dot1x—Adds the dot1x authenticati on method.
mab—Adds the MAB authentication method.
webauth—Adds the Webauth authentication method.