Cisco Catalyst 4500 Series, Руководство по настройке программного обеспечения

Страница: 1375 / 2086

49-95
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 49 Configuring 802.1X Port-Based Authentication
Controlling Switch Access with RADIUS
Removing 802.1X Client Information
The clear dot1x command causes all existing supplicants to be completely deleted from an interface or from all the interfaces
on a switch.
This example shows how to remove 802.1X client information on Fast Ethernet port 1/1:
Switch#
clear dot1x interface fastethernet1/1
This example shows how to remove 802.1X client information on all ports of the switch:
Switch# clear dot1x all
Resetting the 802.1X Configuration to the Default Values
To reset the 802.1X configuration to the default values, perform this task:
Controlling Switch Access with RADIUS
This section describes how to enable and configure the RADIUS, which provides detailed accounting information and flexible
administrative control over authentication and authorization processes. RADIUS is facilitated through AAA and can be enabled
only through AAA commands.
Note For complete syntax and usage information for the commands used in this section, see the Cisco IOS
Security Command Reference, Release 12.2 .
These sections contain this configuration information:
•
Understanding RADIUS, page 49-96
• RADIUS Operation, page 49-97
•
RADIUS Change of Authorization, page 49-97
• Configuring RADIUS, page 49-102
•
Displaying the RADIUS Configuration, page 49-115
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# dot1x default Resets the configurable 802.1X parameters to the default values.
Step 3
Switch(config)# end
Returns to privileged EXEC mode.
Step 4
Switch# show dot1x all
Verifies your entries.
Step 5
Switch# copy running-config
startup-config
(Optional) Saves your entries in the configuration file.