Configuring The Host Mode - Cisco Catalyst 2960 series Configuration Manual

How to Configure 802.1x Port-Based Authentication
Command or Action
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3 radius-server host {hostname |
ip-address} auth-port port-number key
string
Example:
Switch(config)# radius-server host
125.5.5.43 auth-port 1812 key
string
Step 4 end
Example:
Switch(config)# end
Related Topics
Switch-to-RADIUS-Server Communication, on page 1333

Configuring the Host Mode

Beginning in privileged EXEC mode, follow these steps to allow multiple hosts (clients) on an
IEEE 802.1x-authorized port that has the authentication port-control interface configuration command set
to auto. Use the multi-domain keyword to configure and enable multidomain authentication (MDA), which
allows both a host and a voice device, such as an IP phone (Cisco or non-Cisco), on the same switch port.
This procedure is optional.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1366
Purpose
Enters the global configuration mode.
Configures the RADIUS server parameters.
For hostname | ip-address, specify the hostname or IP address of the remote
RADIUS server.
For auth-port port-number, specify the UDP destination port for authentication
requests. The default is 1812. The range is 0 to 65536.
For key string, specify the authentication and encryption key used between the
switch and the RADIUS daemon running on the RADIUS server. The key is a
text string that must match the encryption key used on the RADIUS server.
Always configure the key as the last item in the radius-server host
Note
command syntax because leading spaces are ignored, but spaces within
and at the end of the key are used. If you use spaces in the key, do not
enclose the key in quotation marks unless the quotation marks are part
of the key. This key must match the encryption used on the RADIUS
daemon.
If you want to use multiple RADIUS servers, re-enter this command.
Returns to privileged EXEC mode.