Configuring An Authenticator Switch With Neat - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring an Authenticator Switch with NEAT

Command or Action
Step 8
show authentication sessions interface interface-id
Example:
Switch# show authentication sessions interface
gigabitethernet2/0/3
Step 9
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Configuring an Authenticator Switch with NEAT
Configuring this feature requires that one switch outside a wiring closet is configured as a supplicant and is
connected to an authenticator switch.
Note The cisco-av-pairs must be configured as device-traffic-class=switch on the ACS, which sets the interface
as a trunk after the supplicant is successfully authenticated.
Beginning in privileged EXEC mode, follow these steps to configure a switch as an authenticator:
SUMMARY STEPS
1. configure terminal
2. cisp enable
3. interface interface-id
4. switchport mode access
5. authentication port-control auto
6. dot1x pae authenticator
7. spanning-tree portfast
8. end
9. show running-config interface interface-id
10. copy running-config startup-config
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
284
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Verifies your entries.
(Optional) Saves your entries in the configuration file.
OL-29434-01