Reference Guide

802.1X | 83
Configuring 802.1X
Configuring 802.1X on a port is a two-step process:
1. Enable 802.1X globally. See page 83.
2. Enable 802.1X on an interface. See page 83.
Related Configuration Tasks
• Configuring Request Identity Re-transmissions on page 85
• Configuring Port-control on page 87
• Re-authenticating a Port on page 87
• Configuring Timeouts on page 89
• Configuring a Guest VLAN on page 92
• Configuring an Authentication-fail VLAN on page 92
Important Points to Remember
• FTOS supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and
MS-CHAPv2 with PEAP.
• 802.1X is not supported on port-channels or port-channel members.
Enabling 802.1X
802.1X must be enabled globally and at interface level.
Figure 7-4. Enabling 802.1X
Supplicant
Authenticator
Authentication
Server
2/1
2/2
Force10(conf)#dot1x authentication
Force10(conf)#interface range gigabitethernet 2/1 - 2
Force10(conf-if-range-gi-2/1-2)#dot1x authentication
Force10(conf-if-range-gi-2/1-2)#show config
!
interface GigabitEthernet 2/1
ip address 2.2.2.2/24
dot1x authentication
no shutdown
!
interface GigabitEthernet 2/2
ip address 1.0.0.1/24
dot1x authentication
no shutdown