Configuring 802.1X Authentication - Cisco Catalyst 2960-X Security Configuration Manual

Configuring 802.1x Authentication

Command or Action
Step 7
end
Example:
Switch(config-if)# end
Configuring 802.1x Authentication
To allow per-user ACLs or VLAN assignment, you must enable AAA authorization to configure the switch
for all network-related service requests.
This is the 802.1x AAA process:
Before You Begin
To configure 802.1x port-based authentication, you must enable authentication, authorization, and accounting
(AAA) and specify the authentication method list. A method list describes the sequence and authentication
method to be queried to authenticate a user.
SUMMARY STEPS
1. A user connects to a port on the switch.
2. Authentication is performed.
3. VLAN assignment is enabled, as appropriate, based on the RADIUS server configuration.
4. The switch sends a start message to an accounting server.
5. Re-authentication is performed, as necessary.
6. The switch sends an interim accounting update to the accounting server that is based on the result of
re-authentication.
7. The user disconnects from the port.
8. The switch sends a stop message to the accounting server.
DETAILED STEPS
Step 1
Step 2
Step 3
Step 4
Step 5
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
306
Command or Action
A user connects to a port on the switch.
Authentication is performed.
VLAN assignment is enabled, as appropriate, based on the RADIUS server configuration.
The switch sends a start message to an accounting server.
Re-authentication is performed, as necessary.
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Returns to privileged EXEC mode.
Purpose
OL-29048-01