Cisco Catalyst 2960-XR Security Configuration Manual page 312

Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs
Command or Action
Step 3
aaa new-model
Example:
Switch(config)# aaa new-model
Step 4 aaa authorization network default local group radius
Example:
Switch(config)# aaa authorization network default
local group radius
Step 5 radius-server vsa send authentication
Example:
Switch(config)# radius-server vsa send
authentication
Step 6 interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/4
Step 7
ip access-group acl-id in
Example:
Switch(config-if)# ip access-group default_acl in
Step 8 show running-config interface interface-id
Example:
Switch(config-if)# show running-config interface
gigabitethernet2/0/4
Step 9
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
290
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Enables AAA.
Sets the authorization method to local. To remove the
authorization method, use the no aaa authorization
network default local group radius command.
Configures the radius vsa send authentication.
Specifies the port to be configured, and enter interface
configuration mode.
Configures the default ACL on the port in the input
direction.
Note The acl-id is an access list name or
number.
Verifies your configuration.
(Optional) Saves your entries in the configuration
file.
OL-29434-01