Configuring Security
Configuring 802.1X
Cisco Small Business 200 Series Smart Switch Administration Guide
244
17
•
Authentication Method
—Select the user authentication methods. The
options are:
-
RADIUS, None
—Perform port authentication first by using the RADIUS
server. If no response is received from RADIUS (for example, if the server
is down), then no authentication is performed, and the session is
permitted
.
-
RADIUS
—Authenticate the user on the RADIUS server. If no
authentication is performed, the session is not permitted.
-
None
—Do not authenticate the user. Permit the session.
STEP 3
Click
Apply
. The 802.1X properties are written to the Running Configuration file.
Defining 802.1X Port Authentication
The
Port Authentication
page enables configuration of 802.1X parameters for
each port. Since some of the configuration changes are only possible while the
port is in
Force Authorized
state, such as host authentication, it is recommended
that you change the port control to
Force Authorized
before making changes.
When the configuration is complete, return the port control to its previous state.
NOTE
A port with 802.1x defined on it cannot become a member of a LAG.
To define 802.1X authentication:
STEP 1
Click
Security
>
802.1X
>
Port Authentication
. The
Port Authentication
page is
displayed.
This page displays authentication settings for all ports.
STEP 2
Select a port, and click
Edit.
The
Edit Port Authentication
page is displayed.
STEP 3
Enter the parameters.
•
Interface
—Select a port.
•
User Name
—Displays the username of the port.
•
Current Port Control
—Displays the current port authorization state. If the
state is
Authorized
, the port is either authenticated or the
Administrative
Port Control
is
Force Authorized
. Conversely, if the state is
Unauthorized
,
then the port is either not authenticated or the
Administrative Port Control
is
Force Unauthorized
.
