Configuring Nac Layer 2 Ieee 802.1X Validation; Configuring Web Authentication - Cisco IE 3000 Software Configuration Manual

Configuring IEEE 802.1x Authentication

Configuring NAC Layer 2 IEEE 802.1x Validation

You can configure NAC Layer 2 IEEE 802.1x validation, which is also referred to as IEEE 802.1x
authentication with a RADIUS server.
Beginning in privileged EXEC mode, follow these steps to configure NAC Layer 2 IEEE 802.1x
validation. The procedure is optional.
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3
dot1x guest-vlan vlan-id
Step 4
dot1x reauthentication
Step 5
dot1x timeout reauth-period {seconds |
server}
Step 6 end
Step 7
show dot1x interface interface-id
Step 8 copy running-config startup-config
This example shows how to configure NAC Layer 2 IEEE 802.1x validation:
Switch# configure terminal
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# dot1x reauthentication
Switch(config-if)# dot1x timeout reauth-period server

Configuring Web Authentication

Beginning in privileged EXEC mode, follow these steps to configure authentication, authorization,
accounting (AAA) and RADIUS on a switch before configuring web authentication. The steps enable
AAA by using RADIUS authentication and enable device tracking.
Cisco IE 3000 Switch Software Configuration Guide
10-38
Chapter 10
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Specify an active VLAN as an IEEE 802.1x guest VLAN. The range is 1
to 4094.
You can configure any active VLAN except an RSPAN VLAN, or a voice
VLAN as an IEEE 802.1x guest VLAN.
Enable periodic re-authentication of the client, which is disabled by
default.
Set the number of seconds between re-authentication attempts.
The keywords have these meanings:
seconds—Sets the number of seconds from 1 to 65535; the default is
•
3600 seconds.
• server—Sets the number of seconds based on the value of the
Session-Timeout RADIUS attribute (Attribute[27]) and the
Termination-Action RADIUS attribute (Attribute [29]).
This command affects the behavior of the switch only if periodic
re-authentication is enabled.
Return to privileged EXEC mode.
Verify your IEEE 802.1x authentication configuration.
(Optional) Save your entries in the configuration file.
Configuring IEEE 802.1x Port-Based Authentication
OL-13018-01