Cisco Catalyst 4500 Series Software Configuration Manual page 1323

Chapter 49 Configuring 802.1X Port-Based Authentication
interface GigabitEthernet2/9
switchport
switchport access vlan 29
switchport mode access
switchport voice vlan 1234
access-group mode prefer port
ip access-group pacl-4 in
speed 100
duplex full
authentication event fail action authorize vlan 111
authentication event server dead action authorize vlan 333
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order dot1x
authentication port-control auto
authentication timer restart 100
authentication timer reauthenticate 20
authentication timer inactivity 200
mab
dot1x pae authenticator
end
Switch#
Switch# show access-list pacl-4
10 permit ip host 1.1.1.1 host 2.2.2.2
20 permit icmp host 1.1.1.1 host 2.2.2.2
Switch#
Verify URL-redirect by using the following commands.
The show ip device tracking command displays the constraints on the IP device tracking table:
Switch(config)# show ip device tracking all
IP Device Tracking = Enabled
IP Device Tracking Probe Count = 3
IP Device Tracking Probe Interval = 30
--------------------------------------------------------------
IP Address MAC Address
--------------------------------------------------------------
50.0.0.12 0015.60a4.5e84 GigabitEthernet2/9
The show authentication sessions interface details command displays the URL-redirect-acl and URL-redirect URL
information that downloads from the ACS:
Switch-2033# show authentication sessions int G1/0/7 details
Interface:
MAC Address:
IPv6 Address:
IPv4 Address:
User-Name:
Status:
Domain:
Oper host mode:
Oper control dir:
Session timeout:
Common Session ID:
Acct Session ID:
Handle:
Current Policy:
Local Policies:
Server Policies:
Interface
GigabitEthernet1/0/7
2c54.2d6a.0344
Unknown
7.7.7.17
2C-54-2D-6A-03-44
Authorized
DATA
multi-auth
both
N/A
0A4046D50000009502F03C4B
0x000000D9
0x0700005A
POLICY_Et0/0
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Configuring 802.1X Port-Based Authentication
STATE
ACTIVE
49-43