Configuring Nac Layer 2 Ieee 802.1X Validation - Cisco WS-C2960-24LC-S Software Configuration Manual

Chapter 9 Configuring IEEE 802.1x Port-Based Authentication

Configuring NAC Layer 2 IEEE 802.1x Validation

In Cisco IOS Release 12.2(25)SED or later, you can configure NAC Layer 2 IEEE 802.1x validation,
which is also referred to as IEEE 802.1x authentication with a RADIUS server.
Beginning in privileged EXEC mode, follow these steps to configure NAC Layer 2 IEEE 802.1x
validation. The procedure is optional.
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3
dot1x guest-vlan vlan-id
Step 4
dot1x reauthentication
Step 5
dot1x timeout reauth-period {seconds |
server}
Step 6 end
Step 7 show dot1x interface interface-id
Step 8
copy running-config startup-config
This example shows how to configure NAC Layer 2 IEEE 802.1x validation:
Switch# configure terminal
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# dot1x reauthentication
Switch(config-if)# dot1x timeout reauth-period server
OL-8603-04
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Specify an active VLAN as an IEEE 802.1x guest VLAN. The range is 1
to 4094.
You can configure any active VLAN except an RSPAN VLAN, or a voice
VLAN as an IEEE 802.1x guest VLAN.
Enable periodic re-authentication of the client, which is disabled by
default.
Set the number of seconds between re-authentication attempts.
The keywords have these meanings:
seconds—Sets the number of seconds from 1 to 65535; the default is
•
3600 seconds.
server—Sets the number of seconds based on the value of the
•
Session-Timeout RADIUS attribute (Attribute[27]) and the
Termination-Action RADIUS attribute (Attribute [29]).
This command affects the behavior of the switch only if periodic
re-authentication is enabled.
Return to privileged EXEC mode.
Verify your IEEE 802.1x authentication configuration.
(Optional) Save your entries in the configuration file.
Catalyst 2960 Switch Software Configuration Guide
Configuring IEEE 802.1x Authentication
9-37