How To Configure 802.1X Port-Based Authentication - Cisco Catalyst 2960 series Configuration Manual

How to Configure 802.1x Port-Based Authentication

Fa4/0/4
This is an example of how the session ID appears in the syslog output. The session ID in this example is
also160000050000000B288508E5:
1w0d: %AUTHMGR-5-START: Starting 'mab' for client (0000.0000.0203) on Interface Fa4/0/4
AuditSessionID 160000050000000B288508E5
1w0d: %MAB-5-SUCCESS: Authentication successful for client (0000.0000.0203) on Interface
Fa4/0/4 AuditSessionID 160000050000000B288508E5
1w0d: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client
(0000.0000.0203) on Interface Fa4/0/4 AuditSessionID 160000050000000B288508E5
The session ID is used by the NAD, the AAA server, and other report-analyzing applications to identify the
client. The ID appears automatically. No configuration is required.
How to Configure 802.1x Port-Based Authentication
Default 802.1x Authentication Configuration
Table 126: Default 802.1x Authentication Configuration
Feature
Switch 802.1x enable state
Per-port 802.1x enable state
AAA
RADIUS server
Host mode
Control direction
Periodic re-authentication
Number of seconds between
re-authentication attempts
Re-authentication number
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1352
0000.0000.0203 mab
• IP address
• UDP authentication port
• Key
DATA Authz Success
Default Setting
Disabled.
Disabled (force-authorized).
The port sends and receives normal traffic without 802.1x-based
authentication of the client.
Disabled.
• None specified.
• 1812.
• None specified.
Single-host mode.
Bidirectional control.
Disabled.
3600 seconds.
2 times (number of times that the switch restarts the authentication
process before the port changes to the unauthorized state).
160000050000000B288508E5