Configuration Guide 802.1x Configuration
Tunnel-Medium-Type = "IEEE-802",
Tunnel-Private-Group-ID = "staff"
6) Configure access switch
Turn on AAA switch
configure terminal
aaa new-model
Configure RADIUS server
configure terminal
radius-server host 192.168.197.154
radius-server key shared
Configure authentication method list
configure terminal
aaa authentication dot1x default group radius
aaa accounting network default start-stop group radius
802.1X to select the authentication method list
configure terminal
dot1x authentication default
dot1x accounting default
Enable 802.1X authentication on the interface
configure terminal
interface range fastEthernet 0/1-48
dot1x port-control auto
Enable dynamic VLAN assignment on the interface
configure terminal
interface interface_id
dot1x dynamic-vlan enable
Create VLANs to join after user authentication
configure terminal
vlan 2
name students
vlan 3
name trusted_students
vlan 4
name staff
Create the management IP for access device
configure terminal
interface vlan 1
ip address 192.168.197.241 255.255.255.0
By far, user's needs can be met.