5-10
Configuring Port-Based Access Control (802.1x)
Configuring Switch Ports as 802.1x Authenticators
7. If you are using Port Security on the switch, configure the switch to allow
only 802.1x access on ports configured for 802.1x operation, and (if
desired) the action to take if an unauthorized device attempts access
through an 802.1x port. See page 5-15.
8. Configure 802.1x supplicant management on designated ports. See page
5-17.
Configuring Switch Ports as 802.1x
Authenticators
1. Disable LACP on the Ports Selected for 802.1x Access
Use show lacp to verify that LACP is disabled on the desired ports.
802.1x Authentication Commands Table
[no] aaa port-access authenticator < [ethernet] < port-list >5-11
[ control | quiet-period | tx-period | supplicant-timeout |
server-timeout | max-requests | reauth-period | initialize |
reauthenticate | clear-statistics ]
5-11
aaa authentication port-access 5-13
< local | eap-radius | chap-radius >
[no] aaa port-access authenticator active 5-16
[ no ] port-security [ ethernet ] < port-list > learn-mode port-access 5-15
802.1x Supplicant Commands 5-17
802.1x-Related Show Commands 5-21
RADIUS server configuration 5-14
Syntax: no interface [ e ] < port-list > lacp
Disables LACP on the designated ports.
!FishSecurity.book Page 10 Thursday, October 10, 2002 9:19 PM