Cisco Catalyst 4500 Series Configuration Manual page 1031

Chapter 44 Configuring 802.1X Port-Based Authentication
Dot1x Info for FastEthernet3/1
-----------------------------------
PAE
PortControl
ControlDirection
HostMode
ReAuthentication
QuietPeriod
ServerTimeout
SuppTimeout
ReAuthPeriod
ReAuthMax
MaxReq
TxPeriod
RateLimitPeriod
Critical-Auth
Critical Recovery Action
Critical-Auth VLAN
Dot1x Authenticator Client List
-------------------------------
Supplicant
Auth SM State
Auth BEND SM Stat = RESPONSE
Port Status
Authentication Method
Authorized By
Operational HostMode
Vlan Policy
Switch#
Cisco IOS Release 12.2(46)SG or earlier
Switch# configure terminal
Switch(config)# aaa new-model
Switch(config)# aaa authentication dot1x default group radius
Switch(config)# dot1x system-auth-control
Switch(config)# radius-server host 10.1.2.3 auth-port 1645 acct-port 1646 test username
randomuser idle-time 1 key mykey
Switch(config)# radius deadtime 1
Switch(config)# radius dead-criteria time 15 tries 3
Switch(config)# interface f3/1
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x pae authenticator
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x critical
Switch(config-if)# dot1x critical vlan 17
Switch(config-if)# dot1x critical recovery action reinitialize
Switch(config-if)# end
Switch# show dot1x int fastethernet 3/1 details
Dot1x Info for FastEthernet3/1
-----------------------------------
PAE
PortControl
ControlDirection
HostMode
ReAuthentication
QuietPeriod
ServerTimeout
OL-25340-01
= AUTHENTICATOR
= AUTO
= Both
= SINGLE_HOST
= Disabled
= 60
= 30
= 30
= 3600 (Locally configured)
= 2
= 2
= 30
= 0
= Enabled
= Reinitialize
= 17
= 0000.0000.0001
= AUTHENTICATING
= AUTHORIZED
= Dot1x
= Critical-Auth
= SINGLE_HOST
= 17
= AUTHENTICATOR
= AUTO
= Both
= SINGLE_HOST
= Disabled
= 60
= 30
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Configuring 802.1X Port-Based Authentication
44-63