Setup Guide

Enabling 802.1X

Enable 802.1X globally.

Figure 7. 802.1X Enabled

1 Enable 802.1X globally.

CONFIGURATION mode

dot1x authentication

2 Enter INTERFACE mode on an interface or a range of interfaces.

INTERFACE mode

interface [range]

3 Enable 802.1X on the supplicant interface only.

INTERFACE mode

dot1x authentication

Examples of Verifying that 802.1X is Enabled Globally and on an Interface

Verify that 802.1X is enabled globally and at the interface level using the show running-config | find dot1x command from

EXEC Privilege mode.

In the following example, the bold lines show that 802.1X is enabled.

To view 802.1X conguration information for an interface, use the show dot1x interface command.

In the following example, the bold lines show that 802.1X is enabled on all ports unauthorized by default.

Conguring Request Identity Re-Transmissions

When the authenticator sends a Request Identity frame and the supplicant does not respond, the authenticator waits for 30 seconds and

then re-transmits the frame.

The amount of time that the authenticator waits before re-transmitting and the maximum number of times that the authenticator re-

transmits can be congured.

NOTE

: There are several reasons why the supplicant might fail to respond; for example, the supplicant might have been booting

when the request arrived or there might be a physical layer problem.

To congure re-transmissions, use the following commands.

• Congure the amount of time that the authenticator waits before re-transmitting an EAP Request Identity frame.

INTERFACE mode

dot1x tx-period number

The range is from 1 to 65535 (1 year)

The default is 30.

• Congure the maximum number of times the authenticator re-transmits a Request Identity frame.

INTERFACE mode

dot1x max-eap-req number

The range is from 1 to 10.

The default is 2.

802.1X