Cisco CATALYST 2960

10-58
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
OL-26520-01
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
Switch(config)# radius-server host 1.1.1.2 acct-port 1550 auth-port 1560 test username
user1 idle-time 30 key abc1234
Switch(config)# interface gigabitethernet 1/0/1
Switch(config)# radius-server deadtime 60
Switch(config-if)# authentication event server dead action reinitialicze vlan 20
Switch(config-if)# switchport voice vlan
Switch(config-if)# authentication event server dead action authorize voice
Switch(config-if)# end
Configuring 802.1x Authentication with Wake-on-LAN
Beginning in privileged EXEC mode, follow these steps to enable 802.1x authentication with WoL. This
procedure is optional.
To disable 802.1x authentication with WoL, use the no authentication control-direction interface
configuration command.
These examples show how to enable 802.1x authentication with WoL and set the port as bidirectional:
Switch(config-if)# authentication control-direction both
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface interface-id Specify the port to be configured, and enter interface configuration mode.
For the supported port types, see the “802.1x Authentication
Configuration Guidelines” section on page 10-38.
Step 3
authentication control-direction {both
| in}
Enable 802.1x authentication with WoL on the port, and use these
keywords to configure the port as bidirectional or unidirectional.
• both—Sets the port as bidirectional. The port cannot receive packets
from or send packets to the host. By default, the port is bidirectional.
• in—Sets the port as unidirectional. The port can send packets to the
host but cannot receive packets from the host.
Step 4
end Return to privileged EXEC mode.
Step 5
show authentication interface
interface-id
Verify your entries.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.