10-58
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
This example shows how to configure a switch for a downloadable policy:
Switch# config terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# aaa new-model
Switch(config)# aaa authorization network default group radius
Switch(config)# ip device tracking
Switch(config)# ip access-list extended default_acl
Switch(config-ext-nacl)# permit ip any any
Switch(config-ext-nacl)# exit
Switch(config)# radius-server vsa send authentication
Switch(config)# int fastEthernet 2/13
Switch(config-if)# ip access-group default_acl in
Switch(config-if)# exit
Configuring Flexible Authentication Ordering
Beginning in privileged EXEC mode, follow these steps:
This example shows how to configure a port attempt 802.1x authentication first, followed by web
authentication as fallback method:
Switch# configure terminal
Switch(config)# interface gigabitethernet 1/0/1
Switch(config)# authentication order dot1x webauth
Step 12 show ip device tracking all Displays information about the entries in the IP device tracking table.
Step 13 copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose
Command Purpose
Step 1 configure terminal Enter global configuration mode.
Step 2 interface interface-id Specify the port to be configured, and enter interface
configuration mode.
Step 3 authentication order [dot1x | mab] |
{webauth}
(Optional) Set the order of authentication methods used on a port.
Step 4 authentication priority [dot1x | mab] |
{webauth}
(Optional) Add an authentication method to the port-priority list.
Step 5 show authentication (Optional) Verify your entries.
Step 6 copy running-config startup-config (Optional) Save your entries in the configuration file.