Enabling DHCP snooping ··········································································································································· 332
Displaying DHCP snooping entries ···························································································································· 334
Network requirements ········································································································································· 335
Configuring Switch B ·········································································································································· 335
Managing services ·················································································································································· 338
Overview ······································································································································································· 338
Managing services ······················································································································································· 339
Using diagnostic tools ············································································································································· 341
Ping ················································································································································································ 341
Traceroute ····································································································································································· 341
Ping operation ······························································································································································ 342
IPv4 ping operation ············································································································································· 342
IPv6 ping operation ············································································································································· 343
Traceroute operation ··················································································································································· 344
IPv4 traceroute operation ··································································································································· 344
IPv6 traceroute operation ··································································································································· 345
Configuring 802.1X ··············································································································································· 347
Overview ······································································································································································· 347
802.1X architecture ············································································································································ 347
Access control methods ······································································································································ 347
802.1X-related protocols ···································································································································· 348
Packet formats ······················································································································································ 349
EAP over RADIUS ················································································································································ 350
802.1X timers ······················································································································································ 355
Configuration prerequisites ········································································································································· 358
Configuring 802.1X globally ····································································································································· 358
Configuring 802.1X on a port ··································································································································· 360
Configuration guidelines ···································································································································· 360
Configuration procedure ···································································································································· 360
Configuring an Auth-Fail VLAN ························································································································· 362
Configuration examples ·············································································································································· 363
Configuring AAA ···················································································································································· 378
Overview ······································································································································································· 378
Configuring an ISP domain ········································································································································· 380
AAA configuration example ······································································································································· 385
Network requirements ········································································································································· 385
viii