Port-Based 802.1X Authentication.
Syntax
[no] aaa port-access authenticator <port-list> client-limit
Used to convert a port from user-based authentication to port-based authentication, which is the default setting for ports on which authentication is enabled. (Executing aaa port-access authenticator <port-list> enables 802.1X authentication on <port-list> and enables port-based authentication.) If a port currently has no authenticated client sessions, the next authenticated client session the port accepts determines the untagged VLAN membership to which the port is assigned during the session. If another authenticated client session begins later on the same port while an earlier session is active, the later session replaces the currently active session and will be on the untagged VLAN membership specified by the RADIUS server for the later session.
This example enables ports A10-A12 to operate as authenticators, and then configures the ports for user-based authentication.
switch(config)# aaa port-access authenticator a10-A12 switch(config)# aaa port-access authenticator a10-A12 client-limit 4
This example enables ports A13-A15 to operate as authenticators, and then configures the ports for port-based authentication.
switch(config)# aaa port-access authenticator a13-a15 switch(config)# no aaa port-access authenticator a13-a15 client-limit