Security Commands 848User GuidelinesOnly one authentication method may be specified in the command. For theRADIUS authentication method, if the RADIUS server cannot be contacted,the supplicant fails authentication. The none method always allows access.the ias method utilizes the internal authentication server. The internalauthentication server only supports the EAP-MD5 method.ExampleThe following example configures 802.1x authentication to use noauthentication. Absent any other configuration, this command allows all802.1x users to pass traffic through the switch.console(config)# aaa authentication dot1x default noneThe following example configures 802.1x authentication to use a RADIUSserver. A RADIUS server must be configured previously using the radius-server host auth command for the radius method to succeed.console(config)#aaa authentication dot1x default radiusaaa authentication enableUse the aaa authentication enable command in Global Configuration modeto set authentication for accessing higher administrator privilege levels whenlogged in to the switch console. To return to the default configuration, usethe no form of this command.Syntaxaaa authentication enable {default | list-name} method1 [method2...]no aaa authentication enable {default | list-name}• default — Uses the listed authentication methods that follow thisargument as the default list of methods, when using higher privilege levels.• list-name — Character string used to name the list of authenticationmethods activated, when using access higher privilege levels. (Range: 1-15characters)• method1 [method2... ] — Specify at least one from the following table:
