cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
920
Views
1
Helpful
2
Replies

authentication open --->> or authentication order/priority dot1x

Ibrahim Jamil
Level 6
Level 6

Hello freinds

for dot1x authentication , the port should be "authentication open " OR "authentication priority dot1x" i m using dot1x with guest users , below is port config

 

 

interface GigabitEthernet0/2
switchport mode access
ip device tracking maximum 10
media-type rj45
speed 1000
duplex full
no negotiation auto
authentication host-mode multi-auth
authentication open   --->> or authentication order/priority dot1x
authentication port-control auto
dot1x pae authenticator

2 Replies 2

The command authentication open is different from authentication
priority/order.

- authentication open will grant access to user even if dot1x
authentication/authorization fails. This usually used in monitor mode
- authentication order list the order of authentication which by default
dot1x, cwa, mab

so i must remove the authentication open command