12-54
Cisco IE 3000 Switch Software Configuration Guide
OL-13018-03
Chapter 12 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
This example shows how to configure a switch for a downloadable policy:
Switch#
config terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#
aaa new-model
Switch(config)#
aaa authorization network default group radius
Switch(config)#
ip device tracking
Switch(config)#
ip access-list extended default_acl
Switch(config-ext-nacl)#
permit ip any any
Switch(config-ext-nacl)#
exit
Switch(config)#
radius-server vsa send authentication
Switch(config)#
int fastEthernet 2/13
Switch(config-if)#
ip access-group default_acl in
Switch(config-if)#
exit
Configuring Flexible Authentication Ordering
Beginning in privileged EXEC mode, follow these steps:
This example shows how to configure a port attempt 802.1x authentication first, followed by web
authentication as fallback method:
Switch#
configure terminal
Switch(config)#
interface gigabitethernet 1/0/1
Switch(config)#
authentication order dot1x webauth
Step 12
show ip device tracking
all
Displays information about the entries in the IP device tracking table.
Step 13
copy running-config startup-config
(Optional) Saves your entries in the configuration file.
Command
Purpose
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
interface
interface-id
Specify the port to be configured, and enter interface
configuration mode.
Step 3
authentication order
[
dot1x | mab
] |
{
webauth
}
(Optional) Set the order of authentication methods used on a port.
Step 4
authentication priority
[
dot1x
|
mab
] |
{
webauth
}
(Optional) Add an authentication method to the port-priority list.
Step 5
show authentication
(Optional) Verify your entries.
Step 6
copy running-config startup-config
(Optional) Save your entries in the configuration file.
