Cisco Catalyst 2960-XR - Page 312

PurposeCommand or Action
Enables AAA.aaa new-model
Example:
Switch(config)# aaa new-model
Step 3
Sets the authorization method to local. To remove the
authorization method, use the no aaa authorization
network default local group radius command.
aaa authorization network default local group radius
Example:
Switch(config)# aaa authorization network default
Step 4
local group radius
Configures the radius vsa send authentication.radius-server vsa send authentication
Example:
Switch(config)# radius-server vsa send
Step 5
authentication
Specifies the port to be configured, and enter interface
configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/4
Step 6
Configures the default ACL on the port in the input
direction.
ip access-group acl-id in
Example:
Switch(config-if)# ip access-group default_acl in
Step 7
The acl-id is an access list name or
number.
Note
Verifies your configuration.
show running-config interface interface-id
Example:
Switch(config-if)# show running-config interface
Step 8
gigabitethernet2/0/4
(Optional) Saves your entries in the configuration
file.
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 9
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
290 OL-29434-01
Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs