92
Displaying and maintaining 802.1X
To do…
Command…
Remarks
Display 802.1X session
information, statistics, or
configuration information of
specified or all ports
display dot1x
[
sessions
|
statistics
] [
interface
interface-list
]
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
Clear 802.1X statistics
reset dot1x statistics
[
interface
interface-list
]
Available in user view
802.1X configuration examples
802.1X authentication configuration example
Network requirements
As shown in
, the access device (named Router) performs 802.1X authentication for users who
connect to port GigabitEthernet 1/0/1. Implement MAC-based access control on the port so that the
logoff of one user does not affect other online 802.1X users.
Use RADIUS servers to perform authentication, authorization, and accounting for the 802.1X users. If
RADIUS authentication fails, perform local authentication on the access device. If RADIUS accounting
fails, the access device logs the user off.
Configure the host at 10.1.1.1 as the primary authentication and accounting servers and the host at
10.1.1.2 as the secondary authentication and accounting servers. Assign all users to the ISP domain
aabbcc.net
, which accommodates up to 30 users.
Configure the shared key as
name
for packets between the access device and the authentication server
and as
money
for packets between the access device and the accounting server.
Figure 36
Network diagram for 802.1X authentication configuration
