Configuring The Switch-To-Radius-Server Communication - Cisco Catalyst 2960-X Security Configuration Manual

Configuring IEEE 802.1x Port-Based Authentication
Command or Action
Step 9
switchport mode access
Example:
Switch(config-if)# switchport mode access
Step 10 authentication port-control auto
Example:
Switch(config-if)# authentication
port-control auto
Step 11 dot1x pae authenticator
Example:
Switch(config-if)# dot1x pae authenticator
Step 12
end
Example:
Switch(config-if)# end

Configuring the Switch-to-RADIUS-Server Communication

You can globally configure the timeout, retransmission, and encryption key values for all RADIUS servers
by using the radius-server host global configuration command. If you want to configure these options on a
per-server basis, use the radius-server timeout, the radius-server retransmit, and the radius-server key
global configuration commands.
You also need to configure some settings on the RADIUS server. These settings include the IP address of the
switch and the key string to be shared by both the server and the switch. For more information, see the RADIUS
server documentation.
Follow these steps to configure the RADIUS server parameters on the switch. This procedure is required.
Before You Begin
You must enable authentication, authorization, and accounting (AAA) and specify the authentication method
list. A method list describes the sequence and authentication method to be queried to authenticate a user.
OL-29048-01
Configuring the Switch-to-RADIUS-Server Communication
Purpose
(Optional) Sets the port to access mode only if you configured
the RADIUS server in Step 6 and Step 7.
Enables 802.1x authentication on the port.
Sets the interface Port Access Entity to act only as an
authenticator and ignore messages meant for a supplicant.
Returns to privileged EXEC mode.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
309