Configuration Guide 616
Configuring Network Security
Configuration Examples
Verify the configurations of 802.1X authentication on the port:
Switch_A#show dot1x interface
Port State GuestVLAN PortControl PortMethod Authorized LAG
---- ----- --------- ----------- ---------- ---------- ---
Gi1/0/1 enabled disabled auto mac-based authorized N/A
Gi1/0/2 disabled disabled auto mac-based authorized N/A
Gi1/0/3 disabled disabled auto mac-based authorized N/A
......
Verify the configurations of RADIUS :
Switch_A#show aaa global
AAA global status: Enable
Module Login List Enable List
Telnet default default
Ssh default default
Http default default
Switch_A#show aaa authentication dot1x
Methodlist pri1 pri2 pri3 pri4
default radius1 -- -- --
Switch_A#show aaa group radius1
192.168.0.10
8.3 Example for AAA
8.3.1 Network Requirements
As shown below, the switch needs to be managed remotely via Telnet. In addition, the
senior administrator of the company wants to create an account for the less senior
administrators, who can only view the configurations and some network information
without the Enable password provided.
Two RADIUS servers are deployed in the network to provide a safer authenticate method
for the administrators trying to log in or get administrative privileges. If RADIUS Server 1
