Cisco Catalyst 2960 Series, Configuration Manual

Page: 1447 / 2288

Purpose Command or Action
Sets the interface Port Access Entity to act only as an authenticator
and ignore messages meant for a supplicant. dot1x pae authenticator
Example:
Switch(config-if)#
dot1x pae authenticator
Step 11
Returns to privileged EXEC mode. end
Example:
Switch(config-if)# end
Step 12
Configuring the Switch-to-RADIUS-Server Communication
You can globally configure the timeout, retransmission, and encryption key values for all RADIUS servers
by using the
radius-server host global configuration command. If you want to configure these options on a
per-server basis, use the
radius-server timeout
, the
radius-server retransmit
, and the
radius-server key
global configuration commands.
You also need to configure some settings on the RADIUS server. These settings include the IP address of the
switch and the key string to be shared by both the server and the switch. For more information, see the RADIUS
server documentation.
Follow these steps to configure the RADIUS server parameters on the switch. This procedure is required.
Before You Begin
You must enable authentication, authorization, and accounting (AAA) and specify the authentication method
list. A method list describes the sequence and authentication method to be queried to authenticate a user.
SUMMARY STEPS
1. enable
2.
configure terminal
3. radius-server host { hostname | ip-address } auth-port port-number key string
4. end
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if prompted. enable Step 1
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1365
How to Configure 802.1x Port-Based Authentication