13-26
Configuring Port-Based and User-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
5. Enable 802.1X Authentication on the Switch
After configuring 802.1X authentication as described in the preceding four
sections, activate it with this command:
[key < server-specific key-string >]
Optional. Specifies an encryption key for use during
authentication (or accounting) sessions with the spec-
ified server. This key must match the key used on the
RADIUS server. Use this option only if the specified
server requires a different key than configured for the
global encryption key. The tilde (~) character is allowed
in the string. It is not backward compatible; the “~”
character is lost if you use a software version that does
not support the “~” character.
Syntax: radius-server key < global key-string >
Specifies the global encryption key the switch uses for
sessions with servers for which the switch does not have
a server-specific key. This key is optional if all RADIUS
server addresses configured in the switch include a
server- specific encryption key. The tilde (~) character
is allowed in the string, for example, radius-server key
hp~network. It is not backward compatible; the “~”
character is lost if you use a software version that does
not support the “~” character.
Default: Null
The no form of the command removes the global encryp-
tion key.
Syntax: aaa port-access authenticator active
Activates 802.1X port-access on ports you have configured
as authenticators.
To Next Page
Loading...
Need help?
General
