Name: Cisco 2950 - Catalyst Switch
Brand: Cisco
Rating: 4 (1 reviews)

To Next Page

To Previous Page

10-19

Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide

78-11380-10

Chapter 10 Configuring 802.1x Port-Based Authentication

Configuring 802.1x Authentication

To configure 802.1x port-based authentication, you must enable AAA and specify the authentication

method list. A method list describes the sequence and authentication methods to be queried to

authenticate a user.

The software uses the first method listed to authenticate users. If that method fails to respond, the

software selects the next authentication method in the method list. This process continues until there is

successful communication with a listed authentication method or until all defined methods are

exhausted. If authentication fails at any point in this cycle, the authentication process stops, and no other

authentication methods are attempted.

To allow per-user ACLs or VLAN assignment, you must enable AAA authorization to configure the

switch for all network-related service requests.

This is the 802.1x authentication, authorization and accounting process:

Step 1 A user connects to a port on the switch.

Step 2 Authentication is performed.

Step 3 VLAN assignment is enabled, as appropriate, based on the RADIUS server configuration.

Step 4 The switch sends a start message to an accounting server.

Step 5 Re-authentication is performed, as necessary.

Step 6 The switch sends an interim accounting update to the accounting server that is based on the result of

re-authentication.

Step 7 The user disconnects from the port.

Step 8 The switch sends a stop message to the accounting server.

Beginning in privileged EXEC mode, follow these steps to configure 802.1x port-based authentication:

Step 3

dot1x default Reset the configurable 802.1x parameters to the default values.

Step 4

end Return to privileged EXEC mode.

Step 5

show dot1x interface interface-id Verify your entries.

Step 6

copy running-config startup-config (Optional) Save your entries in the configuration file.

Command Purpose

Step 1

configure terminal Enter global configuration mode.

Step 2

aaa new-model Enable AAA.

Questions and Answers:

Need help?

Do you have a question about the Cisco 2950 - Catalyst Switch and is the answer not in the manual?

Cisco 2950 - Catalyst Switch Specifications

General