Configuring The Inaccessible Authentication Bypass Feature - Cisco Catalyst 3750-E Software Configuration Manual

Hide thumbs Also See for Catalyst 3750-E:

Table of Contents

Configuring 802.1x Authentication

To return to the default value, use the no dot1x auth-fail max-attempts interface configuration

This example shows how to set 2 as the number of authentication attempts allowed before the port moves

to the restricted VLAN:

Switch(config-if)# dot1x auth-fail max-attempts 2

Configuring the Inaccessible Authentication Bypass Feature

You can configure the inaccessible bypass feature, also referred to as critical authentication or the AAA

fail policy.

Beginning in privileged EXEC mode, follow these steps to configure the port as a critical port and enable

the inaccessible authentication bypass feature. This procedure is optional.

configure terminal

radius-server dead-criteria

time time tries tries

radius-server deadtime

Catalyst 3750-E and 3560-E Switch Software Configuration Guide

Enter global configuration mode.

(Optional) Set the conditions that are used to decide when a RADIUS server is

considered unavailable or dead.

The range for time is from 1 to 120 seconds. The switch dynamically determines

the default seconds value that is 10 to 60 seconds.

The range for tries is from 1 to 100. The switch dynamically determines the

default tries parameter that is 10 to 100.

(Optional) Set the number of minutes that a RADIUS server is not sent requests.

The range is from 0 to 1440 minutes (24 hours). The default is 0 minutes.

Configuring IEEE 802.1x Port-Based Authentication

Show Quick Links

Table of Contents

Catalyst3560-e