Cisco Systems 3560 사용자 설명서
10-63
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
Configuring a Web Authentication Local Banner
Beginning in privileged EXEC mode, follow these steps to configure a local banner on a switch that has
web authentication configured.
web authentication configured.
This example shows how to configure a local banner with the custom message My Switch:
Switch(config) configure terminal
Switch(config)# aaa new-model
Switch(config)# aaa ip auth-proxy auth-proxy-banner C My Switch C
Switch(config) end
For more information about the ip auth-proxy auth-proxy-banner command, see the “Authentication
Proxy Commands” section of the
Proxy Commands” section of the
Cisco IOS Security Command Reference
on Cisco.com.
Disabling 802.1x Authentication on the Port
You can disable 802.1x authentication on the port by using the no dot1x pae interface configuration
command.
command.
Beginning in privileged EXEC mode, follow these steps to disable 802.1x authentication on the port.
This procedure is optional.
This procedure is optional.
To configure the port as an 802.1x port access entity (PAE) authenticator, which enables 802.1x on the
port but does not allow clients connected to the port to be authorized, use the dot1x pae authenticator
interface configuration command.
port but does not allow clients connected to the port to be authorized, use the dot1x pae authenticator
interface configuration command.
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
ip admission auth-proxy-banner http
[banner-text | file-path]
[banner-text | file-path]
Enable the local banner.
(Optional) Create a custom banner by entering C banner-text C, where
C is a delimiting character or file-path indicates a file (for example, a logo
or text file) that appears in the banner.
C is a delimiting character or file-path indicates a file (for example, a logo
or text file) that appears in the banner.
Step 3
end
Return to privileged EXEC mode.
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
interface interface-id
Specify the port to be configured, and enter interface configuration mode.
Step 3
no dot1x pae
Disable 802.1x authentication on the port.
Step 4
end
Return to privileged EXEC mode.
Step 5
show authentication interface-id
or
show dot1x interface interface-id
Verify your entries.
Step 6
copy running-config startup-config
(Optional) Save your entries in the configuration file.