Cisco IE-4000 Software Configuration Manual page 241

Configuring IEEE 802.1x Port-Based Authentication
Configuration Examples for Configuring IEEE 802.1x Port-Based Authentication
Configuring NAC Layer 2 802.1x Validation: Example
This example shows how to configure NAC Layer 2 802.1x validation:
Switch# configure terminal
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# authentication periodic
Switch(config-if)# authentication timer reauthenticate
Configuring an 802.1x Authenticator Switch: Example
This example shows how to configure a switch as an 802.1x authenticator:
Switch# configure terminal
Switch(config)# cisp enable
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# switchport mode access
Switch(config-if)# authentication port-control auto
Switch(config-if)# dot1x pae authenticator
Switch(config-if)# spanning-tree portfast trunk
Configuring an 802.1x Supplicant Switch: Example
This example shows how to configure a switch as a supplicant:
Switch# configure terminal
Switch(config)# cisp enable
Switch(config)# dot1x credentials test
Switch(config)# username suppswitch
Switch(config)# password myswitch
Switch(config)# dot1x supplicant force-multicast
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# switchport mode trunk
Switch(config-if)# dot1x pae supplicant
Switch(config-if)# dot1x credentials test
Switch(config-if)# end
Configuring a Downloadable Policy: Example
This example shows how to configure a switch for a downloadable policy:
Switch# config terminal
Enter configuration commands, one per line.
Switch(config)# aaa new-model
Switch(config)# aaa authorization network default group radius
Switch(config)# ip device tracking
Switch(config)# ip access-list extended default_acl
Switch(config-ext-nacl)# permit ip any any
Switch(config-ext-nacl)# exit
Switch(config)# radius-server vsa send authentication
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# ip access-group default_acl in
Switch(config-if)# exit
Configuring Open 1x on a Port: Example
This example shows how to configure open 1x on a port:
End with CNTL/Z.
237