225
Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Configuring 802.1x Accounting
Before You Begin
AAA must be enabled on your switch.
8. authentication control-direction {both
| in}
(Optional) Enables 802.1x authentication with WoL on the port, and uses
these keywords to configure the port as bidirectional or unidirectional.
both—Sets the port as bidirectional. The port cannot receive packets
from or send packets to the host. By default, the port is bidirectional.
in—Sets the port as unidirectional. The port can send packets to the
host but cannot receive packets from the host.
9. authentication order [mab] {webauth} (Optional) Sets the order of authentication methods.
mab—Adds MAC authentication bypass (MAB) to the order of
authentication methods.
webauth—Adds web authentication to the order of authentication
methods.
10. authentication order [dot1x | mab] |
{webauth}
(Optional) Sets the order of authentication methods used on a port.
11. authentication priority [dot1x | mab] |
{webauth}
(Optional) Adds an authentication method to the port-priority list.
12. dot1x default Resets the 802.1x parameters to the default values.
13. end Returns to privileged EXEC mode.
14. show authentication interface
interface-id
Verifies your entries.
15. copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose
Command Purpose
1. configure terminal Enters global configuration mode.
2. interface interface-id Specifies the port to be configured, and enter interface configuration
mode.
3. aaa accounting dot1x default
start-stop group radius
Enables 802.1x accounting using the list of all RADIUS servers.
4. aaa accounting system default
start-stop group radius
(Optional) Enables system accounting (using the list of all RADIUS
servers) and generates system accounting reload event messages when
the switch reloads.
5. end Returns to privileged EXEc mode.
6. show running-config Verifies your entries.
7. copy running-config startup-config (Optional) Saves your entries in the configuration file.