CLI Reference Guide

802.1x Commands 859
authentication order
This command sets the order of authentication methods used on a port. The
available authentication methods are Dot1x, MAB, and captive portal.
Ordering sets the order of methods that the switch attempts when trying to
authenticate a new device connected to a port. If one method is unsuccessful
or timed out, the next method is attempted.
Use the no form of this command to return the port to the default
authentication order.
Syntax
authentication order [dot1x [mab] | mab [dot1x]] [captive portal]
no authentication order
Default Configuration
There is no default configuration for this command.
Command Modes
Interface VLAN Configuration mode
User Guidelines
Each method can only be entered once. Ordering is only possible between
802.1x and MAB. Captive portal can be configured either as a stand-alone
method or as the last method in the order.
Example
console(config-if-Gi1/0/1)# authentication order dot1x mab captive-portal
console(config-if-Gi1/0/1)# no authentication order
authentication priority
Use this command to set the priority for the authentication methods used on
a port. The available authentication methods are Dot1x, MAB, and captive
portal. The authentication priority decides if a previously authenticated client
is reauthenticated with a higher-priority method when the same is received.
Captive portal is always the last method in the list.
2CSNXXX_SWUM200.book Page 859 Tuesday, December 10, 2013 1:22 PM