Scribd
Upload
73 views

Configuring 802.1X

The document provides instructions to configure a RADIUS server on switch S1 for 802.1x authentication and enable 802.1x port-based authentication on interface F0/1. The key steps are to enable AAA, configure the RADIUS server with IP 10.1.1.50 and shared secret "RADIUS-Pa55w0rd", specify RADIUS as the default authentication method, enable 802.1x globally, and configure interface F0/1 as an access port with 802.1x authentication and authenticator PAE type.

Uploaded by

erojas
Copyright
© © All Rights Reserved
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
73 views

Configuring 802.1X

The document provides instructions to configure a RADIUS server on switch S1 for 802.1x authentication and enable 802.1x port-based authentication on interface F0/1. The key steps are to enable AAA, configure the RADIUS server with IP 10.1.1.50 and shared secret "RADIUS-Pa55w0rd", specify RADIUS as the default authentication method, enable 802.1x globally, and configure interface F0/1 as an access port with 802.1x authentication and authenticator PAE type.

Uploaded by

erojas
Copyright
© © All Rights Reserved
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 1

Configure a RADIUS server on S1 using the following instructions:

Enable AAA.
Enter RADIUS server configuration mode and name the configuration CCNAS.
Configure the RADIUS server address to 10.1.1.50. with the authentication port of
1812 and the accounting port of 1813.
Configure the shared secret key RADIUS-Pa55w0rd.
Exit RADIUS configuration mode.
Specify an 802.1x port-based default authentication method list with the primary
option RADIUS.
Globally enable 802.1x port-based authentication.
S1(config)# aaa new-model
S1(config)# radius server CCNAS
S1(config-radius-server)# address ipv4 10.1.1.50 auth-port 1812 acct-port 1813
S1(config-radius-server)# key RADIUS-Pa55w0rd
S1(config-radius-server)# exit
S1(config)# aaa authentication dot1x default group radius
S1(config)# dot1x system-auth-control
S1(config)#
Configure interface F0/1 using the following instructions:
Configure the interface as an access switchport.
Enable port-based authentication on the interface.
Enable 802.1x authentication with the Port Access Entity (PAE) type so the
interface acts only as an authenticator.
Use the end command to exit from configuration mode.
S1(config)# interface F0/1
S1(config-if)# switchport mode access
S1(config-if)# authentication port-control auto
S1(config-if)# dot1x pae authenticator
S1(config-if)# end
S1#
*Mar 3 18:22:23.443: %SYS-5-CONFIG_I: Configured from console by console
You successfully configured 802.1x port-authentication on a 2960 switch.

You might also like