Cisco Catalyst 2960 Series, Configuration Manual

Page: 1434 / 2288

Fa4/0/4 0000.0000.0203 mab DATA Authz Success 160000050000000B288508E5
This is an example of how the session ID appears in the syslog output. The session ID in this example is
also160000050000000B288508E5:
1w0d: %AUTHMGR-5-START: Starting 'mab' for client (0000.0000.0203) on Interface Fa4/0/4
AuditSessionID 160000050000000B288508E5
1w0d: %MAB-5-SUCCESS: Authentication successful for client (0000.0000.0203) on Interface
Fa4/0/4 AuditSessionID 160000050000000B288508E5
1w0d: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client
(0000.0000.0203) on Interface Fa4/0/4 AuditSessionID 160000050000000B288508E5
The session ID is used by the NAD, the AAA server, and other report-analyzing applications to identify the
client. The ID appears automatically. No configuration is required.
How to Configure 802.1x Port-Based Authentication
Default 802.1x Authentication Configuration
Table 126: Default 802.1x Authentication Configuration
Default Setting Feature
Disabled. Switch 802.1x enable state
Disabled (force-authorized).
The port sends and receives normal traffic without 802.1x-based
authentication of the client.
Per-port 802.1x enable state
Disabled. AAA
• None specified.
• 1812.
• None specified.
RADIUS server
• IP address
• UDP authentication port
• Key
Single-host mode. Host mode
Bidirectional control. Control direction
Disabled. Periodic re-authentication
3600 seconds. Number of seconds between
re-authentication attempts
2 times (number of times that the switch restarts the authentication
process before the port changes to the unauthorized state). Re-authentication number
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1352
How to Configure 802.1x Port-Based Authentication