01-23-2017 03:34 AM - edited 03-11-2019 12:23 AM
Hello,
I can't configure port-based authentication into 2960-X Lanbase 15.2(2)E6 IOS.
It seems that the CLI no longer exist :
2960X_ENG_121#conf t
Enter configuration commands, one per line. End with CNTL/Z.
2960X_ENG_121(config)#int gi 1/0/1
000876: Jan 23 12:23:33.362 CET: %PARSER-5-CFGLOG_LOGGEDCMD: User:admin logged command:interface GigabitEthernet1/0/1
2960X_ENG_121(config-if)#authentication ?
% Unrecognized command
My show ver :
2960X_ENG_121#sh ver
Cisco IOS Software, C2960X Software (C2960X-UNIVERSALK9-M), Version 15.2(2)E6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 16-Dec-16 21:27 by prod_rel_team
ROM: Bootstrap program is C2960X boot loader
BOOTLDR: C2960X Boot Loader (C2960X-HBOOT-M) Version 15.2(3r)E1, RELEASE SOFTWARE (fc1)
2960X_ENG_121 uptime is 1 hour, 0 minutes
System returned to ROM by power-on
System restarted at 11:23:13 CET Mon Jan 23 2017
System image file is "flash:/c2960x-universalk9-mz.152-2.E6/c2960x-universalk9-mz.152-2.E6.bin"
Last reload reason: power-on
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
cisco WS-C2960X-24PS-L (APM86XXX) processor (revision M0) with 524288K bytes of memory.
Processor board ID FCW2052B2NG
Last reset from power-on
2 Virtual Ethernet interfaces
1 FastEthernet interface
80 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 2C:86:D2:E9:66:00
Motherboard assembly number : 73-16694-06
Power supply part number : 341-0528-02
Motherboard serial number : FOC20522B6F
Power supply serial number : DCC20469549
Model revision number : M0
Motherboard revision number : A0
Model number : WS-C2960X-24PS-L
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FOC20511XY1
System serial number : FCW2052B2NG
Top Assembly Part Number : 68-100472-03
Top Assembly Revision Number : A0
Version ID : V05
CLEI Code Number : CMMLR00ARE
Daughterboard revision number : A0
Hardware Board Revision Number : 0x19
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
1 52 WS-C2960X-48FPS-L 15.2(2)E6 C2960X-UNIVERSALK9-M
* 2 28 WS-C2960X-24PS-L 15.2(2)E6 C2960X-UNIVERSALK9-M
Switch 01
---------
Switch Uptime : 1 hour, 0 minutes
Base ethernet MAC Address : 2C:86:D2:FC:42:00
Motherboard assembly number : 73-16691-06
Power supply part number : 341-0527-02
Motherboard serial number : FOC205213FJ
Power supply serial number : DCB204661LK
Model revision number : N0
Motherboard revision number : A0
Model number : WS-C2960X-48FPS-L
Daughterboard assembly number : 73-14200-03
Daughterboard serial number : FOC20521Z53
System serial number : FOC2052S0L5
Top assembly part number : 68-100469-02
Top assembly revision number : A0
Version ID : V05
CLEI Code Number : CMMLN00ARD
Daughterboard revision number : A0
Configuration register is 0xF
I don't find anything on this configuration part into the Release Notes :
My dot1x configuration is correctly applied into 15.2(2)E3.
However, the last version that is preferred for production environment is now 15.2(2)E6.
Anyone have a feedback on this ?
Sylvain.
01-23-2017 04:02 AM
Can you paste the existing switchport config? I have experienced in the past that the authentication commands don't show up unless you have "switchport mode access" explicitly configured.
01-23-2017 04:59 AM
Yes ! switchport mode access was missing and solve the authentication CLI.
Thanks for this quick reply !
04-06-2018 01:28 PM
A big Thanks to Rahul...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide