Cisco Catalyst 2960-XR Security Configuration Manual page 314

Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs
Command or Action
Step 3
interface interface-id
Example:
Switch(config)# interface
gigabitethernet2/0/2
Step 4
ip access-group acl-id in
Example:
Switch(config-if)# ip access-group
default_acl in
Step 5
exit
Example:
Switch(config-if)# exit
Step 6 aaa new-model
Example:
Switch(config)# aaa new-model
Step 7 aaa authorization network default group
radius
Example:
Switch(config)# aaa authorization
network default group radius
Step 8
ip device tracking
Example:
Switch(config)# ip device tracking
Step 9 ip device tracking probe [count | interval |
use-svi]
Example:
Switch(config)# ip device tracking
probe count
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
292
Configuring IEEE 802.1x Port-Based Authentication
Purpose
(Optional) Enters log to cause an informational logging message about
the packet that matches the entry to be sent to the console.
Enters interface configuration mode.
Configures the default ACL on the port in the input direction.
The acl-id is an access list name or
Note
number.
Returns to global configuration mode.
Enables AAA.
Sets the authorization method to local. To remove the authorization
method, use the no aaa authorization network default group radius
command.
Enables the IP device tracking table.
To disable the IP device tracking table, use the no ip device tracking
global configuration commands.
(Optional) Configures the IP device tracking table:
• count count—Sets the number of times that the switch sends the
ARP probe. The range is from 1 to 5. The default is 3.
• interval interval—Sets the number of seconds that the switch
waits for a response before resending the ARP probe. The range
is from 30 to 300 seconds. The default is 30 seconds.
OL-29434-01