Configuring 802.1X Port-Based Authentication - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring IEEE 802.1x Port-Based Authentication
DETAILED STEPS
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8

Configuring 802.1x Port-Based Authentication

Beginning in privileged EXEC mode, follow these steps to configure 802.1x port-based authentication:
SUMMARY STEPS
1. configure terminal
2. aaa new-model
3. aaa authentication dot1x {default} method1
4. dot1x system-auth-control
5. aaa authorization network {default} group radius
6. radius-server host ip-address
7. radius-server key string
8. interface interface-id
9. switchport mode access
10. authentication port-control auto
11. dot1x pae authenticator
12. end
OL-29434-01
Command or Action
A user connects to a port on the switch.
Authentication is performed.
VLAN assignment is enabled, as appropriate, based on the RADIUS server configuration.
The switch sends a start message to an accounting server.
Re-authentication is performed, as necessary.
The switch sends an interim accounting update to the accounting server that is based on
the result of re-authentication.
The user disconnects from the port.
The switch sends a stop message to the accounting server.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Configuring 802.1x Port-Based Authentication
Purpose
253