Common Session Id; How To Configure 802.1X Port-Based Authentication; Default 802.1X Authentication Configuration - Cisco Catalyst 2960-XR Security Configuration Manual
Ios release 15.0 2 ex1
Hide thumbs
Also See for Catalyst 2960-XR:
- Configuration manual (196 pages) ,
- Configuration manuals (120 pages) ,
- Reference (52 pages)
Table of Contents
Advertisement
Configuring IEEE 802.1x Port-Based Authentication
Related Topics
Configuring Voice Aware 802.1x Security, on page 248
Common Session ID
Authentication manager uses a single session ID (referred to as a common session ID) for a client no matter
which authentication method is used. This ID is used for all reporting purposes, such as the show commands
and MIBs. The session ID appears with all per-session syslog messages.
The session ID includes:
• The IP address of the Network Access Device (NAD)
• A monotonically increasing unique 32 bit integer
• The session start time stamp (a 32 bit integer)
This example shows how the session ID appears in the output of the show authentication command. The
session ID in this example is 160000050000000B288508E5:
Switch# show authentication sessions
Interface
Fa4/0/4
This is an example of how the session ID appears in the syslog output. The session ID in this example is
also160000050000000B288508E5:
1w0d: %AUTHMGR-5-START: Starting 'mab' for client (0000.0000.0203) on Interface Fa4/0/4
AuditSessionID 160000050000000B288508E5
1w0d: %MAB-5-SUCCESS: Authentication successful for client (0000.0000.0203) on Interface
Fa4/0/4 AuditSessionID 160000050000000B288508E5
1w0d: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client
(0000.0000.0203) on Interface Fa4/0/4 AuditSessionID 160000050000000B288508E5
The session ID is used by the NAD, the AAA server, and other report-analyzing applications to identify the
client. The ID appears automatically. No configuration is required.
How to Configure 802.1x Port-Based Authentication
Default 802.1x Authentication Configuration
Table 25: Default 802.1x Authentication Configuration
Feature
Switch 802.1x enable state
Per-port 802.1x enable state
OL-29434-01
MAC Address
Method
0000.0000.0203
mab
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Domain
Status
DATA
Authz Success
Default Setting
Disabled.
Disabled (force-authorized).
The port sends and receives normal traffic without 802.1x-based
authentication of the client.
Common Session ID
Session ID
160000050000000B288508E5
243
Hide quick links:
Advertisement
Table of Contents
