802.1x Configuration
432
The PC is connecting to port 1/0/2 of the switch; IEEE 802.1x authentication is
enabled on port1/0/2; the access mode is the default MAC-based authentication. The
switch IP address is 10.1.1.2. Any port other than port 1/0/2 is used to connect to RADIUS
authentication server, which has an IP address of 10.1.1.3, and use the default port 1812
for authentication and port 1813 for accounting. IEEE 802.1x authentication client
software is installed on the PC and is used in IEEE 802.1x authentication.
The configuration procedures are listed below:
Switch(config)#interface vlan 1
Switch(Config-if-vlan1)#ip address 10.1.1.2 255.255.255.0
Switch(Config-if-vlan1)#exit
Switch(config)#radius-server authentication host 10.1.1.3
Switch(config)#radius-server accounting host 10.1.1.3
Switch(config)#radius-server key test
Switch(config)#aaa enable
Switch(config)#aaa-accounting enable
Switch(config)#dot1x enable
Switch(config)#interface ethernet 1/0/2
Switch(Config-Ethernet1/0/2)#dot1x enable
Switch(Config-Ethernet1/0/2)#dot1x port-control auto
Switch(Config-Ethernet1/0/2)#exit
47.3.3
Examples of IPv6 Radius Application
Fig 47-17 IPv6 Radius
Connect the computer to the interface 1/0/2 of the switch, and enable IEEE802.1x on
interface1/0/2. Use MAC based authentication. Configure the IP address of the switch as
2004:1:2:3::1
2004:1:2:3::2
Radius Server
2004:1:2:3::3