Configuring Switch-To-Radius-Server Communication - Cisco 6500 Series Software Configuration Manual

Configuring 802.1X Port-Based Authentication
Command
Step 6
Router(config)# end
Step 7
Router# show dot1x all
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
When you enable 802.1X port-based authentication, note the following syntax information:
•
•
This example shows how to enable AAA and 802.1X on Fast Ethernet port 5/1:
Router# configure terminal
Router(config)# aaa new-model
Router(config)# aaa authentication dot1x default group radius
Router(config)# dot1x system-auth-control
Router(config)# interface fastethernet 5/1
Router(config-if)# dot1x port-control auto
Router(config-if)# end
This example shows how to verify the configuration:
Router# show dot1x all
Dot1x Info for interface FastEthernet5/1
----------------------------------------------------
AuthSM State
BendSM State
PortStatus
MaxReq
MultiHosts
Port Control
QuietPeriod
Re-authentication = Disabled
ReAuthPeriod
ServerTimeout
SuppTimeout
TxPeriod

Configuring Switch-to-RADIUS-Server Communication

RADIUS security servers are identified by any of the following:
•
•
Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide—Release 12.1 E
25-8
To create a default list that is used when a named list is not specified in the authentication
command, use the default keyword followed by the methods that are to be used in default situations.
The default method list is automatically applied to all interfaces.
Enter at least one of these keywords:
group radius—Use the list of all RADIUS servers for authentication.
–
– none—Use no authentication. The client is automatically authenticated by the switch without
using the information supplied by the client.
= FORCE UNAUTHORIZED
= IDLE
= UNAUTHORIZED
= 2
= Disabled
= Force UnAuthorized
= 60 Seconds
= 3600 Seconds
= 30 Seconds
= 30 Seconds
= 30 Seconds
Host name
Host IP address
Chapter 25 Configuring IEEE 802.1X Port-Based Authentication
Purpose
Returns to privileged EXEC mode.
Verifies your entries.
Check the Status column in the 802.1X Port Summary
section of the display. An enabled status means the
port-control value is set either to auto or to
force-unauthorized.
78-14099-04