Configuring 802.1X With Unidirectional Controlled Port - Cisco Catalyst 4500 Series Software Configuration Manual

Configuring 802.1X Port-Based Authentication
Switch(config)# aaa authentication dot1x default group radius
Switch(config)# dot1x system-auth-control
Switch(config)# radius-server host 10.1.2.3 auth-port 1645 acct-port 1646 test username randomuser idle-time
1 key mykey
Switch(config)# radius-server deadtime 1
Switch(config)# radius-server dead-criteria time 15 tries 3
Switch(config)# interface f3/1
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x pae authenticator
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x critical
Switch(config-if)# dot1x critical vlan 17
Switch(config-if)# dot1x critical recovery action reinitialize
Switch(config-if)# end
Switch# show dot1x int fastethernet 3/1 details
Dot1x Info for FastEthernet3/1
-----------------------------------
PAE
PortControl
ControlDirection
HostMode
ReAuthentication
QuietPeriod
ServerTimeout
SuppTimeout
ReAuthPeriod
ReAuthMax
MaxReq
TxPeriod
RateLimitPeriod
Critical-Auth
Critical Recovery Action
Critical-Auth VLAN
Dot1x Authenticator Client List
-------------------------------
Supplicant
Auth SM State = AUTHENTICATING
Auth BEND SM Stat = RESPONSE
Port Status
Authentication Method
Authorized By
Operational HostMode
Vlan Policy
Switch#

Configuring 802.1X with Unidirectional Controlled Port

To configure unidirectional controlled port, perform this task:
Command
Step 1
Switch# configure terminal
Step 2
Switch(config)# interface
interface-id
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
49-66
= AUTHENTICATOR
= AUTO
= Both
= SINGLE_HOST
= Disabled
= 60
= 30
= 30
= 3600 (Locally configured)
= 2
= 2
= 30
= 0
= Enabled
= Reinitialize
= 17
= 0000.0000.0001
= AUTHORIZED
= Dot1x
= Critical-Auth
= SINGLE_HOST
= 17
Purpose
Enters global configuration mode.
Specifies the port to be configured and enters interface configuration
mode.
Chapter 49 Configuring 802.1X Port-Based Authentication