Cisco Systems 3560 Manual De Usuario

This example shows how to configure 802.1x authentication with web authentication as a fallback 
method. 

Switch(config) configure terminal

Switch(config)# ip admission name rule1 proxy http

Switch(config)# fallback profile fallback1

Switch(config-fallback-profile)# ip access-group default-policy in 

Switch(config-fallback-profile)# ip admission rule1 

Switch(config-fallback-profile)# exit

Switch(config)# interface gigabitethernet0/1

Switch(config-if)# switchport mode access 

Switch(config-if)# dot1x port-control auto 

Switch(config-if)# dot1x fallback fallback1 

Switch(config-if)# end

For more information about the authentication fallback and dot1x fallback commands, see the 
command reference for this release. For more information about the ip admission name and ip 
access-group commands, see the 

on 

Cisco.com.

or 

Enable 802.1x authentication on the interface.

authentication fallback fallback-profile

or 

dot1x fallback fallback-profile

Configure the port to authenticate a client by using web 
authentication when no 802.1x supplicant is detected on the port. 
Any change to the fallback-profile global configuration takes effect 
the next time 802.1x fallback is invoked on the interface.

Web authorization cannot be used as a fallback method 
for 802.1x if the port is configured for multidomain 
authentication.

Return to privileged EXEC mode.

show authentication interface interface-id

or

show dot1x interface interface-id

Verify your configuration.

(Optional) Save your entries in the configuration file.