Cisco Catalyst 2960-XR Security Configuration Manual page 273

Configuring IEEE 802.1x Port-Based Authentication
SUMMARY STEPS
1. configure terminal
2. aaa new-model
3. aaa authentication dot1x {default} method1
4. interface interface-id
5. switchport mode access
6. authentication violation {shutdown | restrict | protect | replace}
7. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2 aaa new-model
Example:
Switch(config)# aaa new-model
Step 3 aaa authentication dot1x {default} method1
Example:
Switch(config)# aaa authentication dot1x
default group radius
Step 4 interface interface-id
Example:
Switch(config)# interface
gigabitethernet1/0/4
Step 5 switchport mode access
Example:
Switch(config-if)# switchport mode access
OL-29434-01
Purpose
Enters the global configuration mode.
Enables AAA.
Creates an 802.1x authentication method list.
To create a default list that is used when a named list is not specified
in the authentication command, use the default keyword followed
by the method that is to be used in default situations. The default
method list is automatically applied to all ports.
For method1, enter the group radius keywords to use the list of all
RADIUS servers for authentication.
Though other keywords are visible in the command-line help
Note
string, only the group radius keywords are supported.
Specifies the port connected to the client that is to be enabled for
IEEE 802.1x authentication, and enter interface configuration mode.
Sets the port to access mode.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Configuring 802.1x Violation Modes
251