Table of Contents
Advertisement
Chapter 9
Configuring IEEE 802.1x Port-Based Authentication
Beginning in privileged EXEC mode, follow these steps to configure a port to use web authentication:
Command
Step 1
configure terminal
Step 2
ip admission name rule proxy http
Step 3
interface interface-id
Step 4
switchport mode access
Step 5
ip access-group access-list in
Step 6
ip admission rule
Step 7
end
Step 8
show running-config interface
interface-id
Step 9
copy running-config startup-config
This example shows how to configure only web authentication on a switch port:
Switch# configure terminal
Switch(config)# ip admission name rule1 proxy http
Switch(config)# interface gigabit1/0/1
Switch(config-if)# switchport mode access
Switch(config-if)# ip access-group policy1 in
Switch(config-if)# ip admission rule1
Switch(config-if)# end
Beginning in privileged EXEC mode, follow these steps to configure a switch port for IEEE 802.1x
authentication with web authentication as a fallback method:
Command
Step 1
configure terminal
Step 2
ip admission name rule proxy http
Step 3
fallback profile fallback-profile
Step 4
ip access-group policy in
Step 5
ip admission rule
Step 6
end
Step 7
interface interface-id
Step 8
switchport mode access
OL-8603-04
Purpose
Enter global configuration mode.
Define a web authentication rule.
Note
The same rule cannot be used for both web authentication and
NAC Layer 2 IP validation. For more information, see the
Network Admission Control Software Configuration Guide
Cisco.com.
Specify the port to be configured, and enter interface configuration
mode.
Set the port to access mode.
Specify the default access control list to be applied to network traffic
before web authentication.
Apply an IP admission rule to the interface.
Return to privileged EXEC mode.
Verify your configuration.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Define a web authentication rule.
Define a fallback profile to allow an IEEE 802.1x port to
authenticate a client by using web authentication.
Specify the default access control list to apply to network traffic
before web authentication.
Associate an IP admission rule with the profile, and specify that
a client connecting by web authentication uses this rule.
Return to privileged EXEC mode.
Specify the port to be configured, and enter interface
configuration mode.
Set the port to access mode.
Catalyst 2960 Switch Software Configuration Guide
Configuring IEEE 802.1x Authentication
on
9-39
Advertisement
Chapters
Table of Contents
Troubleshooting
