Cisco Catalyst 2960-X Security Configuration Manual page 370

Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs
SUMMARY STEPS
1. configure terminal
2. ip device tracking
3. aaa new-model
4. aaa authorization network default local group radius
5. radius-server vsa send authentication
6. interface interface-id
7. ip access-group acl-id in
8. show running-config interface interface-id
9. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2 ip device tracking
Example:
Switch(config)# ip device tracking
Step 3
aaa new-model
Example:
Switch(config)# aaa new-model
Step 4
aaa authorization network default local group radius
Example:
Switch(config)# aaa authorization network default
local group radius
Step 5 radius-server vsa send authentication
Example:
Switch(config)# radius-server vsa send
authentication
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
346
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Enters global configuration mode.
Sets the ip device tracking table.
Enables AAA.
Sets the authorization method to local. To remove the
authorization method, use the no aaa authorization
network default local group radius command.
Configures the radius vsa send authentication.
OL-29048-01