Cisco Catalyst 2960 Series, Configuration Manual

Page: 1486 / 2288

Purpose Command or Action
Enables AAA. aaa new-model
Example:
Switch(config)#
aaa new-model
Step 6
Sets the authorization method to local. To remove the authorization
method, use the
no aaa authorization network default group radius
command.
aaa authorization network default group
radius
Example:
Switch(config)# aaa authorization
Step 7
network default group radius
Enables the IP device tracking table. ip device tracking Step 8
Example:
Switch(config)# ip device tracking
To disable the IP device tracking table, use the
no ip device tracking
global configuration commands.
(Optional) Configures the IP device tracking table:
ip device tracking probe
[
count
|
interval
|
use-svi ]
Step 9
•
count count
— Sets the number of times that the switch sends the
ARP probe. The range is from 1 to 5. The default is 3.
Example:
Switch(config)#
ip device tracking
•
interval interval
—
Sets the number of seconds that the switch
waits for a response before resending the ARP probe. The range
is from 30 to 300 seconds. The default is 30 seconds.
probe count
• use-svi — Uses the switch virtual interface (SVI) IP address as
source of ARP probes.
Configures the network access server to recognize and use
vendor-specific attributes.
radius-server vsa send authentication
Example:
Switch(config)#
radius-server vsa send
Step 10
The downloadable ACL must be
operational.
Note
authentication
Returns to privileged EXEC mode. end
Example:
Switch(config)# end
Step 11
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1404
How to Configure 802.1x Port-Based Authentication