Cisco Systems 3560X Manual De Usuario

11-56

Catalyst 3750-X and 3560-X Switch Software Configuration Guide

OL-21521-01

Chapter 11 Configuring IEEE 802.1x Port-Based Authentication

Configuring 802.1x Authentication

Switch(config-if)# dot1x critical

Switch(config-if)# dot1x critical recovery action reinitialize

Switch(config-if)# dot1x critical vlan 20

Switch(config-if)# end

Configuring 802.1x Authentication with WoL

Beginning in privileged EXEC mode, follow these steps to enable 802.1x authentication with WoL. This
procedure is optional.

To disable 802.1x authentication with WoL, use the no dot1x control-direction interface configuration
command.

This example shows how to enable 802.1x authentication with WoL and set the port as bidirectional:

Switch(config-if)# dot1x control-direction both

Configuring MAC Authentication Bypass

Beginning in privileged EXEC mode, follow these steps to enable MAC authentication bypass. This
procedure is optional.

Command

Purpose

Step 1

configure terminal

Enter global configuration mode.

Step 2

interface

interface-id

Specify the port to be configured, and enter interface configuration mode.
For the supported port types, see the

“802.1x Authentication

Configuration Guidelines” section on page 11-36

Step 3

dot1x control-direction

{both | in}

Enable 802.1x authentication with WoL on the port, and use these
keywords to configure the port as bidirectional or unidirectional.

•

both

—Sets the port as bidirectional. The port cannot receive packets

from or send packets to the host. By default, the port is bidirectional.

•

—Sets the port as unidirectional. The port can send packets to the

host but cannot receive packets from the host.

Step 4

end

Return to privileged EXEC mode.

Step 5

show authentication interface-id

show dot1x interface interface-id

Verify your entries.

Step 6

copy running-config startup-config

(Optional) Save your entries in the configuration file.