Specifications

Configuring 802.1X Authentication
21-12 Security Configuration
Configuring 802.1X Authentication
Purpose
Toreviewandconfigure802.1XauthenticationforoneormoreportsusingEAPOL(Extensible
AuthenticationProtocol).802.1Xcontrolsnetworkaccessbyenforcinguserauthorizationon
selectedports,whichresultsinallowingordenyingnetworkaccessaccordingtoRADIUSserver
configuration.
Commands
Thecommandsusedtoreviewandconfigure802.1Xarelistedbelow:
Notes: One user per EAPOL-configured port can be authenticated on SecureStack C3 devices.
Only one method of authentication can be deployed per port.
To configure EAP pass-through, which allows client authentication packets to be forwarded through
the switch to an upstream device, 802.1X authentication must be globally disabled with the set
dot1x command (“set dot1x” on page 21-16).
For information about... Refer to page...
show dot1x 21-13
show dot1x auth-config 21-14
set dot1x 21-16
set dot1x auth-config 21-17
clear dot1x auth-config 21-18
show eapol 21-19
set eapol 21-21
clear eapol 21-22