PurposeCommand or Action
Specifies the port to be configured, and enter interface
configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet1/0/3
Step 2
Enables 802.1x accounting using the list of all
RADIUS servers.
aaa accounting dot1x default start-stop group radius
Example:
Switch(config-if)# aaa accounting dot1x default
Step 3
start-stop group radius
(Optional) Enables system accounting (using the list
of all RADIUS servers) and generates system
aaa accounting system default start-stop group radius
Example:
Switch(config-if)# aaa accounting system default
Step 4
accounting reload event messages when the switch
reloads.
start-stop group radius
Returns to privileged EXEc mode.end
Example:
Switch(config-if)# end
Step 5
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 6
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 7
Configuring a Guest VLAN
When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN when
the server does not receive a response to its EAP request/identity frame. Clients that are 802.1x-capable but
that fail authentication are not granted network access. The switch supports guest VLANs in single-host or
multiple-hosts mode.
Beginning in privileged EXEC mode, follow these steps to configure a guest VLAN. This procedure is optional.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1378
How to Configure 802.1x Port-Based Authentication
To Next Page
Loading...
