34.
802.1X Port-Based Authentication
MN700004 Rev 01
376
radius
Debug RADIUS packets.
recv
Debug packets sending and receiving.
send
Debug packets receiving.
detail
Debug packets sending.
Displaying the 802.1X Debugging
The
show debug dot1x
command, in Privileged (Enable) mode, displays the debug status for
the 802.1X. The debug commands can help the network manager to monitor a session as it
proceeds on the switch.
Command Syntax
device-name
#
show debug dot1x
Example
device-name
#
show debug dot1x
PBA core debugging is on: 802.1X core process,Re-Authentication
process
PBA Authenticator State Machine debugging is on:
status,events,timers
PBA Backend State Machine debugging is on:
status,events,timers
PBA RADIUS debugging is on: packet send,packet receive,events,
PBA EAPOL debugging is on: packet send,packet receive
Configuration Example
1. Set the RADIUS server and specify the IP address, key, username, password and AAA
authentication:
device-name
#
configure terminal
device-name
(config)#
radius-server host 9.0.0.26
device-name
(config)#
radius-server key hello
device-name
(config)#
username batm password a1h8RRzG11d4U
device-name
(config)#
aaa authentication login default radius local
2. Configure port 1/1/6 of the Authenticator for authorization, setting it to auto authorization
mode:
device-name
(config)#
interface 1/1/6
device-name
(config-if 1/1/6)#
dot1x port-control auto
Related Commands
The table below shows the 802.1X-related commands.