aaa authentication dot1x

Enables 802.1X and MAC authentication.
Syntax
aaa authentication dot1x default radius [ none ]
no aaa authentication dot1x default radius [ none ]
aaa authentication dot1x default none
no aaa authentication dot1x default none
Command Default

AAA authentication is disabled.

Parameters
default
Configures the default named list.
radius
Configures RADIUS authentication.
none
Disables authentication. The client is automatically authenticated by other means, without the device using information supplied by the client.
Modes

Global configuration mode

Usage Guidelines

To use 802.1X and MAC authentication, you must specify an authentication method to be used to authenticate clients. RADIUS authentication with 802.1X authentication is supported. To use RADIUS authentication with 802.1X authentication, you create an authentication method list for 802.1X and specify RADIUS as an authentication method, and then configure communication between the device and the RADIUS server.

If you specify both RADIUS and none, ensure RADIUS comes before none when the command is used.

You can configure the RADIUS and None as authentication methods. If the configured primary authentication fails due to an error, the device tries the backup authentication methods in the order they are configured.

Use the aaa authentication dot1x default radius command for both MAC authentication and 802.1X authentication.

The no form of the command disables authentication.

Examples

The following example enables 802.1x authentication. 

device(config)# aaa authentication dot1x default radius

The following example enables MAC authentication. 

device(config)# aaa authentication dot1x default radius
Parent topic: Commands A and B