Chapter 2 Cisco Io Command - Cisco Catalyst 2950 Command Reference Manual

aaa authentication dot1x
Usage Guidelines
The method argument identifies the list of methods that the authentication algorithm tries in the given
sequence to validate the password provided by the client. The only method that is truly
802.1X-compliant is the group radius method, in which the client data is validated against a RADIUS
authentication server. The remaining methods enable AAA to authenticate the client by using locally
configured data. For example, the local and local-case methods use the username and password that are
saved in the IOS configuration file. The enable and line methods use the enable and line passwords for
authentication.
If you specify group radius, you must configure the RADIUS server by entering the radius-server host
global configuration command.
If you are not using a RADIUS server, you can use the local or local-case methods, which access the
local username database to perform authentication. By specifying the enable or line methods, you can
supply the clients with a password to provide access to the switch.
Use the show running-config privileged EXEC command to display the configured lists of
authentication methods.
Examples This example shows how to enable AAA and how to create an authentication list for 802.1X. This
authentication first tries to contact a RADIUS server. If this action returns an error, the user is allowed
access with no authentication.
Switch(config)# aaa new model
Switch(config)# aaa authentication dot1x default group radius none
You can verify your settings by entering the show running-config privileged EXEC command.
Related Commands Command
aaa new-model
show running-config
Catalyst 2950 Desktop Switch Command Reference
2-2
Description
Enables the AAA access control model. For syntax information, refer to
Cisco IOS Security Command Reference for Release 12.1 >
Authentication, Authorization, and Accounting > Authentication
Commands.
Displays the configuration information running on the switch. For syntax
information, select Cisco IOS Configuration Fundamentals Command
Reference for Release 12.1 > Cisco IOS File Management Commands >
Configuration File Commands.
Chapter 2 Cisco IOS Commands
78-11381-05