Cisco Catalyst 4500 Series Administration Guide

46-94
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 46 Configuring 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
This example shows how to configure a switch as a supplicant:
Switch# configure terminal
Switch(config)# cisp enable
Switch(config)# dot1x credentials test
Switch(config)# username suppswitch
Switch(config)#
password myswitch
Switch(config)# dot1x supplicant force-multicast
Switch(config)# interface gigabitethernet1/0/1
Switch(config-if)# switchport trunk encapsulation dot1q
Switch(config-if)# switchport mode trunk
Switch(config-if)# dot1x pae supplicant
Switch(config-if)# dot1x credentials test
Switch(config-if)# end
The following macro is applied to the authenticator switch port after the supplicant switch is
deauthenticated due to a link-down or a reauthenticating event:
no switchport nonegotiate
switchport mode access
no switchport trunk native vlan $AVID
no spanning-tree portfast trunk
switchport access vlan $AVID
spanning-tree bpduguard enable
spanning-tree portfast
Configuring NEAT with ASP
You can also use an AutoSmart Ports user-defined macro rather than a switch VSA to configure the
authenticator switch. For more information, see the Chapter 21, “Configuring Cisco IOS Auto Smartport
Macros.”
Configuration Guidelines
• If BPDU Guard was enabled prior to supplicant switch authentication, it is re-enabled after the
supplicant switch unauthenticates.
Step 7
Switch(config)# interface
interface-id
Specifies the port to be configured, and enter interface configuration
mode.
Step 8
Switch(config-if)# switchport
trunk encapsulation dot1q
Sets the port to trunk mode.
Step 9
Switch(config-if)# switchport mode
trunk
Configures the interface as a VLAN trunk port.
Step 10
Switch(config-if)# dot1x pae
supplicant
Configures the interface as a port access entity (PAE) supplicant.
Step 11
Switch(config-if)# dot1x
credentials profile-name
Attaches the 802.1x credentials profile to the interface.
Step 12
Switch(config-if)# end
Returns to privileged EXEC mode.
Step 13
Switch# show running-config
interface
interface
Verifies your configuration.
Note it is the only command that tells you that the smart macro has
been applied after the supplicant switch has been authenticated.
Step 14
Switch# copy running-config
startup-config
(Optional) Saves your entries in the configuration file.
Command Purpose

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E