Cisco Catalyst 2960-XR - Configuring an Authenticator Switch with NEAT

PurposeCommand or Action
Verifies your entries.
show authentication sessions interface interface-id
Example:
Switch# show authentication sessions interface
Step 8
gigabitethernet2/0/3
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 9
Configuring an Authenticator Switch with NEAT
Configuring this feature requires that one switch outside a wiring closet is configured as a supplicant and is
connected to an authenticator switch.
The cisco-av-pairs must be configured as device-traffic-class=switch on the ACS, which sets the interface
as a trunk after the supplicant is successfully authenticated.
Note
Beginning in privileged EXEC mode, follow these steps to configure a switch as an authenticator:
SUMMARY STEPS
1.
configure terminal
2.
cisp enable
3.
interface interface-id
4.
switchport mode access
5.
authentication port-control auto
6.
dot1x pae authenticator
7.
spanning-tree portfast
8.
end
9.
show running-config interface interface-id
10.
copy running-config startup-config
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
284 OL-29434-01
Configuring IEEE 802.1x Port-Based Authentication
Configuring an Authenticator Switch with NEAT