Specifications

Configuring Authentication
April 15, 2011 Page 17 of 36
Configuring MAC-based Authentication
ConfiguringMACbasedauthenticationonaswitchconsistsof:
•SettingtheglobalMACauthenticationpasswordfortheswitch
OptionallysettingthenumberofMACauthenticationsessionsallowedonaport
EnablingMACauthenticationonaport
EnablingMACauthenticationglobally
•Settingtheauthenticationmodetomulti
Optionallyreinitializingorreauthenticatingexistingsessions
Procedure 2describes
howtoconfigureMACbasedauthentication.Unspecifiedparametersuse
theirdefaultvalues.
5. If an entity deactivates due to the supplicant
logging off, inability to authenticate, or the
supplicant or associated policy settings are no
longer valid, you can reinitialize a deactivated
access entity. If necessary, reinitialize the
specified entity.
set dot1x init [port-string] [index index-list]
6. If the authentication for a supplicant times out or
is lost for any reason, you can reauthenticate
that supplicant. If necessary, reauthenticate the
specified entity.
set dot1x reauth [port-string] [index
index-list]
7. Display IEEE 802.1x configuration. show dot1x auth-config
Procedure 1 IEEE 802.1x Configuration (continued)
Step Task Command(s)
Procedure 2 MAC-Based Authentication Configuration
Step Task Command(s)
1. Optionally set or clear a global password on the
switch.
set macauthentication password password
clear macauthentication password
password
2. Set or clear the number of MAC authentication
sessions supported on a port. The modular
switch platform allows for the setting of the
number of MAC authentication sessions
supported on a port.
set macauthentication authallocated
number port-string
3. Enable or disable MAC authentication on a port.
By default, MAC authentication is disabled for all
ports. MAC authentication must be enabled on
the ports that will use it.
set macauthentication port {enable |
disable}
4. Enable or disable MAC authentication globally
on the device. By default, MAC authentication is
globally disabled on the device.
set macauthentication {enable | disable}
5. Set the MultiAuth mode. set multiauth mode multi