Cisco APIC Security Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Security Configuration Guide, Release 6.2(x)

Configure 802.1X port authentication using the REST API

Updated: April 17, 2026

Want to summarize with AI?

Log in

Creates, updates, and deletes an 802.1X port authentication policy by submitting XML payloads to the Cisco APIC REST API.

This procedure manages an 802.1X port authentication policy named test21 under uni/infra.

Before you begin

Establish an authenticated Cisco APIC REST API session before you begin.

Procedure

  1. Submit this XML payload to create and enable an 802.1X port authentication policy:

    Example:

    <polUni>
            <infraInfra>
            <l2PortAuthPol adminSt="enabled" annotation="" descr=""
            dn="uni/infra/portauthpol-test21" hostMode="multi-auth"
            name="test21" nameAlias="" ownerKey="" ownerTag="">
            <l2PortAuthCfgPol annotation="" macAuth="bypass"
            maxReauthReq="2" maxReq="2" reAuthPeriod="3600"
            serverTimeout="30" suppTimeout="30" txPeriod="30"/>
            </l2PortAuthPol>
            </infraInfra>
            </polUni>

  2. Submit this XML payload to change the host mode to multi-domain and the MAC authentication mode to eap:

    Example:

    <polUni>
            <infraInfra>
            <l2PortAuthPol adminSt="enabled" annotation="" descr=""
            dn="uni/infra/portauthpol-test21" hostMode="multi-domain"
            name="test21" nameAlias="" ownerKey="" ownerTag="">
            <l2PortAuthCfgPol annotation="" macAuth="eap"
            maxReauthReq="2" maxReq="2" reAuthPeriod="3600"
            serverTimeout="30" suppTimeout="30" txPeriod="30"/>
            </l2PortAuthPol>
            </infraInfra>
            </polUni>

  3. Submit this XML payload to delete the 802.1X port authentication policy:

    Example:

    <polUni>
            <infraInfra>
            <l2PortAuthPol adminSt="enabled" annotation="" descr=""
            dn="uni/infra/portauthpol-test21" hostMode="multi-host"
            name="test21" nameAlias="" ownerKey="" ownerTag=""
            status="deleted">
            <l2PortAuthCfgPol annotation="" macAuth="bypass"
            maxReauthReq="2" maxReq="2" reAuthPeriod="3600"
            serverTimeout="30" suppTimeout="30" txPeriod="30"
            status="deleted"/>
            </l2PortAuthPol>
            </infraInfra>
            </polUni>

The REST API creates, updates, or deletes the specified 802.1X port authentication policy according to the submitted payload.