Cisco IE-4000 Software Configuration Manual page 223

Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Command
5. aaa authorization network {default}
group radius
6. radius-server host ip-address
7. radius-server key string
8. interface interface-id
9. switchport mode access
10. authentication port-control auto
11. dot1x pae authenticator
12. end
13. show authentication
14. copy running-config startup-config
Configuring the Switch-to-RADIUS-Server Communication
You can globally configure the timeout, retransmission, and encryption key values for all RADIUS servers by using the
radius-server host global configuration command. If you want to configure these options on a per-server basis, use the
radius-server timeout, radius-server retransmit, and the radius-server key global configuration commands. For more
information, see Configuring Settings for All RADIUS Servers, page
Purpose
(Optional) Configures the switch to use user-RADIUS authorization for all
network-related service requests, such as per-user ACLs or VLAN
assignment.
For per-user ACLs, single-host mode must be configured. This setting is
the default.
(Optional) Specifies the IP address of the RADIUS server.
(Optional) Specifies the authentication and encryption key used between
the switch and the RADIUS daemon running on the RADIUS server.
Specifies the port connected to the client to enable for 802.1x
authentication, and enter interface configuration mode.
(Optional) Sets the port to access mode only if you configured the
RADIUS server in Step 6 and Step 7.
Enables 802.1x authentication on the port.
Sets the interface Port Access Entity to act only as an authenticator and
ignore messages meant for a supplicant.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
176.
219