46-9
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 46 Configuring IEEE 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
AuthSM State = FORCE UNAUTHORIZED
BendSM State = IDLE
PortStatus = UNAUTHORIZED
MaxReq = 2
MultiHosts = Disabled
Port Control = Force UnAuthorized
QuietPeriod = 60 Seconds
Re-authentication = Disabled
ReAuthPeriod = 3600 Seconds
ServerTimeout = 30 Seconds
SuppTimeout = 30 Seconds
TxPeriod = 30 Seconds
Configuring Router-to-RADIUS-Server Communication
RADIUS security servers are identified by any of the following:
•
Host name
•
Host IP address
•
Host name and specific UDP port numbers
•
IP address and specific UDP port numbers
The combination of the IP address and UDP port number creates a unique identifier, which enables
RADIUS requests to be sent to multiple UDP ports on a server at the same IP address. If two different
host entries on the same RADIUS server are configured for the same service (for example,
authentication) the second host entry configured acts as the failover backup to the first one. The RADIUS
host entries are tried in the order that they were configured.
To configure the RADIUS server parameters, perform this task:
When you configure the RADIUS server parameters, note the following information:
•
For
hostname
or
ip_address,
specify the host name or IP address of the remote RADIUS server.
•
Specify the
key
string
on a separate command line.
Command
Purpose
Step 1
Router(config)#
ip radius source-interface
interface_name
Specifies that the RADIUS packets have the IP address of
the indicated interface.
Router(config)#
no ip radius source-interface
Prevents the RADIUS packets from having the IP address
of the previously indicated interface.
Step 2
Router(config)#
radius-server host
{
hostname
|
ip_address
}
Configures the RADIUS server host name or IP address
on the router.
If you want to use multiple RADIUS servers, reenter this
command.
Router(config)#
no radius-server host
{
hostname
|
ip_address
}
Deletes the specified RADIUS server.
Step 3
Router(config)#
radius-server key
string
Configures the authorization and encryption key used
between the router and the RADIUS daemon running on
the RADIUS server.
Step 4
Router(config)#
end
Returns to privileged EXEC mode.
