Creating or Removing an Authenticator PAE on an Interface
You can create or remove the 802.1X authenticator port access entity (PAE) instance on an interface.
By default, the Cisco NX-OS software creates the authenticator PAE instance on the interface when you
enable 802.1X on an interface.
Note
Before you begin
Enable the 802.1X feature.
SUMMARY STEPS
1.
configure terminal
2.
(Optional)
show dot1x interface ethernet slot/port
3.
interface ethernet slot/port
4.
[
no
]
dot1x pae authenticator
5.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Displays the 802.1X configuration on the interface.
(Optional)
show dot1x interface ethernet slot/port
Example:
Step 2
switch# show do1x interface ethernet 2/1
Selects the interface to configure and enters interface
configuration mode.
interface ethernet slot/port
Example:
Step 3
switch(config)# interface ethernet 2/1
switch(config-if)#
Creates an authenticator PAE instance on the interface. Use
the
no
form to remove the PAE instance from the interface.
[
no
]
dot1x pae authenticator
Example:
Step 4
If an authenticator PAE already exists on the
interface the
dot1x pae authentication
command does not change the configuration on
the interface.
Note
switch(config-if)# dot1x pae authenticator
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 5
switch(config)# copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
190
Configuring 802.1X
Creating or Removing an Authenticator PAE on an Interface
