Users Guide

Security Commands 1093
• all—All interfaces (Ethernet).
Default Configuration
By default, newly configured users are authorized to authenticate on all
interfaces. Use the no dot1x user username all command to remove the user
from all ports and then use the dot1x user username <interface-id> to add
the user to specific ports.
Command Mode
Global Configuration mode
User Guidelines
Use this command to restrict authentication to a subset of interfaces. The list
is maintained per interface. Use the command once for each interface on
which the user is allowed to authenticate.
Command History
Command introduced in version 6.6 firmware.
Example
This command creates IAS user Philip and allows authentication for Philip on
Gi1/0/1 and Gi1/0/2 when using the IAS database for authentication.
console(config)#aaa ias-user username Philip
console(config-ias-user)#exit
console(config)#authentication dot1x default ias
console(config)#no dot1x user Philip all
console(config)#dot1x user Philip Gi1/0/1
console(config)#dot1x user Philip Gi1/0/2
show dot1x
Use the show dot1x command to display the global or interface configuration
or the statistics for an interface.
Syntax
show dot1x [detail interface-id statistics interface-id]
• detail—Display detailed information for an interface.