Authentication Example - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Chapter 27 Configuring Switch Access Using AAA
This example shows how to display the statistics for the different types of EAP frames transmitted and
received by the authenticator on port 1 on module 4:
Console> (enable) show port dot1x statistics 4/1
Port
-----
4/1
Port
-----
4/1
To display the global 802.1x parameters, perform this task in normal mode:
Task
Display the PAE capabilities, protocol version,
system-auth-control, and other global dot1x
parameters.
This example shows how to display the global 802.1x parameters:
Console> (enable) show dot1x
PAE Capability
Protocol Version
system-auth-control
re-authentication
max-req
quiet-period
re-authperiod
server-timeout
supp-timeout
tx-period

Authentication Example

Figure 27-3
In this example, TACACS+ authentication is enabled and local authentication is disabled for both login
and enable access to the switch for all Telnet connections. When Workstation A attempts to connect to
the switch, the user is challenged for a TACACS+ username and password.
However, only local authentication is enabled for both login and enable access on the console port. Any
user with access to the directly connected terminal can access the switch using the login and enable
passwords.
78-12647-02
Tx_Req/Id Tx_Req Tx_Total Rx_Start Rx_Logoff Rx_Resp/Id Rx_Resp
--------- ------ -------- -------- --------- ---------- -------
97 0 97
Rx_Invalid Rx_Len_Err Rx_Total Last_Rx_Frm_Ver Last_Rx_Frm_Src_Mac
---------- ---------- -------- --------------- -------------------
0 0 0
Authenticator Only
1
enabled
disabled
2
60 seconds
3600 seconds
30 seconds
30 seconds
30 seconds
shows a simple network topology using TACACS+.
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
0 0 0
0 00-00-00-00-00-00
Command
show dot1x
Authentication Example
0
27-47