Table of Contents
Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Command
9.
authentication server dead
action authorize [vlan]
10.
end
11.
show authentication
interface interface-id
12.
copy running-config
startup-config
Configuring 802.1x User Distribution
Beginning in global configuration, follow these steps to configure a VLAN group and to map a VLAN to it:
Command
1.
vlan group vlan-group-name vlan-list vlan-list
2.
show vlan group all vlan-group-name
3.
no vlan group vlan-group-name vlan-list
vlan-list
Configuring NAC Layer 2 802.1x Validation
You can configure NAC Layer 2 802.1x validation, which is also referred to as 802.1x authentication with a RADIUS server.
Command
1.
configure terminal
2.
interface interface-id
3.
authentication event no-response
action authorize vlan vlan-id
4.
authentication periodic
5.
authentication timer reauthenticate
6.
end
7.
show authentication interface
interface-id
8.
copy running-config startup-config
Purpose
Authorizes the switch in access VLAN or configured VLAN (if the VLAN is specified)
when the ACS server is down.
Returns to privileged EXEC mode.
(Optional) Verifies your entries.
(Optional) Saves your entries in the configuration file.
Purpose
Configures a VLAN group, and maps a single VLAN or a range of
VLANs to it.
Verifies the configuration.
Clears the VLAN group configuration or elements of the VLAN
group configuration.
Purpose
Enters global configuration mode.
Specifies the port to be configured, and enters interface configuration
mode.
Specifies an active VLAN as an 802.1x guest VLAN. The range is 1
to 4096.
You can configure any active VLAN except an internal VLAN (routed port),
an RSPAN VLAN, or a voice VLAN as an 802.1x guest VLAN.
Enables periodic reauthentication of the client, which is disabled by
default.
Sets reauthentication attempt for the client (set to one hour).
This command affects the behavior of the switch only if periodic
reauthentication is enabled.
Returns to privileged EXEC mode.
Verifies your 802.1x authentication configuration.
(Optional) Saves your entries in the configuration file.
229
- Quick Links:
- Configuration Overview
Hide quick links:
Chapters
Table of Contents
Troubleshooting
