port 1812 and port 1813. The Digital China IEEE802.1x authentication client software is
installed on the computer to implement IEEE802.1x authentication。
The following is the procedure of configuration:
Switch(Config)#interface vlan 1↵
Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0↵
Switch(Config-if-vlan1)#exit↵
Switch(Config)#radius-server authentication host 10.1.1.3↵
Switch(Config)#radius-server accounting host 10.1.1.3↵
Switch(Config)#radius-server key test↵
Switch(Config)#aaa enable↵
Switch(Config)#aaa-accounting enable↵
Switch(Config)#dot1x enable↵
Switch(Config)#interface ethernet 0/0/2↵
Switch(Config-Ethernet0/0/2)#dot1x enable↵
Switch(Config-Ethernet0/0/2)#dot1x port-method macbased↵
Switch(Config-Ethernet0/0/2)#dot1x port-control auto↵
Switch(Config-Ethernet0/0/2)#exit
14.4 802.1x Troubleshooting
14.4.1 802.1x Monitor and debug Command List
14.4.1.1 show aaa config
Command: show aaa config
Function: Display the configured commands for the switch as a RADIUS client.
Command mode: Admin Mode
Usage Guide: Displays whether AAA authentication, accounting are enabled and
information for key, authentication and accounting server specified.
Example:
Switch#show aaa config(For Boolean value, 1 stands for TRUE and 0 for FALSE)
----------------- AAA config data ------------------
Is Aaa Enabled = 1
Is Account Enabled= 1
MD5 Server Key = aa
authentication server sum = 2
authentication server[0].Host IP = 30.1.1.30
DCS-3950 series Ethernet switch manual
.Udp Port = 1812
.Is Primary = 1
241