Cisco IE 4000 Software Configuration Guide

229
Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Configuring 802.1x User Distribution
Beginning in global configuration, follow these steps to configure a VLAN group and to map a VLAN to it:
Configuring NAC Layer 2 802.1x Validation
You can configure NAC Layer 2 802.1x validation, which is also referred to as 802.1x authentication with a RADIUS server.
9. authentication server dead
action authorize [vlan]
Authorizes the switch in access VLAN or configured VLAN (if the VLAN is specified)
when the ACS server is down.
10. end Returns to privileged EXEC mode.
11. show authentication
interface interface-id
(Optional) Verifies your entries.
12. copy running-config
startup-config
(Optional) Saves your entries in the configuration file.
Command Purpose
Command Purpose
1. vlan group vlan-group-name vlan-list vlan-list Configures a VLAN group, and maps a single VLAN or a range of
VLANs to it.
2. show vlan group all vlan-group-name Verifies the configuration.
3. no vlan group vlan-group-name vlan-list
vlan-list
Clears the VLAN group configuration or elements of the VLAN
group configuration.
Command Purpose
1. configure terminal Enters global configuration mode.
2. interface interface-id Specifies the port to be configured, and enters interface configuration
mode.
3. authentication event no-response
action authorize vlan vlan-id
Specifies an active VLAN as an 802.1x guest VLAN. The range is 1
to 4096.
You can configure any active VLAN except an internal VLAN (routed port),
an RSPAN VLAN, or a voice VLAN as an 802.1x guest VLAN.
4. authentication periodic Enables periodic reauthentication of the client, which is disabled by
default.
5. authentication timer reauthenticate Sets reauthentication attempt for the client (set to one hour).
This command affects the behavior of the switch only if periodic
reauthentication is enabled.
6. end Returns to privileged EXEC mode.
7. show authentication interface
interface-id
Verifies your 802.1x authentication configuration.
8. copy running-config startup-config (Optional) Saves your entries in the configuration file.

Cisco IE 4000 Specifications

General

Product Type	Switch
Form Factor	DIN Rail Mountable
MAC Address Table Size	8000
Jumbo Frame Support	9216 bytes
Operating Temperature	-40°C to 70°C
Mean Time Between Failures (MTBF)	Over 500, 000 hours
Memory	256 MB DRAM
Mounting	DIN Rail, Wall
Certifications	EN 50121-4
Ports	8 x 10/100Base-TX Ethernet Ports