Cisco Catalyst 3560-X User Manual

1-54
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
This example shows how to configure 802.1x accounting. The first command configures the RADIUS
server, specifying 1813 as the UDP port for accounting:
Switch(config)# radius-server host 172.120.39.46 auth-port 1812 acct-port 1813 key rad123
Switch(config)# aaa accounting dot1x default start-stop group radius
Switch(config)# aaa accounting system default start-stop group radius
Configuring Device Sensor
Device Sensor is enabled by default. Complete the following tasks when you want Device Sensor to
include or exclude a list of TLVs for a particular protocol. These lists are called filter lists.
Note If you do not perform any Device Sensor configuration tasks, the following TLVs are included by
default:
• CDP filter--secondport-status-type and powernet-event-type (types 28 and 29)
• LLDP filter--organizationally-specific (type 127)
• DHCP filter--message-type (type 53)
• Enabling Accounting Augmentation, page 1-54
• Creating a Cisco Discovery Protocol Filter, page 1-55
• Creating an LLDP Filter, page 1-56
• Creating a DHCP Filter, page 1-56
• Applying a Protocol Filter to the Device Sensor Output, page 1-57
• Tracking TLV Changes, page 1-58
• Verifying the Device Sensor Configuration, page 1-58
Enabling Accounting Augmentation
For the Device Sensor protocol data to be added to accounting messages, you must first enable session
accounting by using the following standard Authentication, Authorization, and Accounting (AAA) and
RADIUS configuration commands:
Switch(config)# aaa new-model
Switch(config)# aaa accounting dot1x default start-stop group radius
Switch(config)# radius-server host{hostname|ip-address}[auth-port
port-number][acct-port port-number] [timeout seconds][retransmit retries][key string]
Switch(config)# radius-server vsa send accounting
Beginning in privileged EXEC mode, follow these steps to add Device Sensor protocol data to
accounting records:

Cisco Catalyst 3560-X Specifications

General

Enclosure Type	Rack-mountable - 1U
Subtype	Gigabit Ethernet
Ports	48 x 10/100/1000 + 4 x SFP
Flash Memory	64 MB
Power Device	Internal power supply
Voltage Required	AC 120/230 V (50/60 Hz)
Operating System	Cisco IOS
Device Type	Switch
Performance	Switching capacity: 128 Gbps
Jumbo Frame Support	Yes
Routing Protocol	RIP-1, RIP-2, EIGRP
Remote Management Protocol	SNMP 1, RMON 1, RMON 2, RMON 3, RMON 9, Telnet, SNMP 3, HTTP, HTTPS
Features	DHCP support, VLAN support, QoS, IPv6 support, Syslog
Compliant Standards	IEEE 802.3, IEEE 802.3u, IEEE 802.3z, IEEE 802.1D, IEEE 802.1Q, IEEE 802.3ab, IEEE 802.1p, IEEE 802.3af, IEEE 802.3x, IEEE 802.3ad, IEEE 802.1w, IEEE 802.1x, IEEE 802.1s, IEEE 802.3ah, IEEE 802.1ag, IEEE 802.3at
Stacking	Stackable
Security Features	SSH, RADIUS, TACACS+
Management	CLI
Dimensions (H x W x D)	17.5 in
Operating Temperature	32 to 113 °F (0 to 45 °C)
Humidity	10 - 95% (non-condensing)