Globally configures the order of the Network Login (NetLogin) port‘s authentication protocols.
dot1x | Configures the 802.1x authentication protocol preference. |
mac | Configures the MAC-based authentication protocol preference. |
web-based | Configures the web-based authentication protocol preference. |
cep | Configure Convergence End Point (CEP) authentication protocol preference. CEP only appears as an option if policy is enabled. |
By default, the protocol precedence order for a NetLogin-enabled port is:
Web-based authentication occurs only when the port belongs to the NetLogin VLAN.
When you change the protocol precedence, the action for the current highest precedence protocol takes effect immediately if the client is authenticated by this protocol.
When you disable the highest precedence protocol on a port, the action for the next precedence protocol takes effect immediately if client is authenticated by this protocol.
CEP only appears as an option in the command if policy is enabled.
The following example sets the protocol precedence order to Dot1x, Web-based, and MAC.
configure netlogin authentication protocol-order dot1x web-based mac cep
This command was first available in ExtremeXOS 15.7.1.
CEP option was added in ExtremeXOS 30.2.
This command is available on the ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, and X870 series switches.