Cisco Systems 4500 Controlling Switch Access with RADIUS

40-92
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 40 Configuring 802.1X Port-Based Authentication
Controlling Switch Access with RADIUS
Switch# dot1x initialize
Removing 802.1X Client Information
The clear dot1x command causes all existing supplicants to be completely deleted from an interface or
from all the interfaces on a switch.
This example shows how to remove 802.1X client information on Fast Ethernet port 1/1:
Switch# clear dot1x interface fastethernet1/1
This example shows how to remove 802.1X client information on all ports of the switch:
Switch# clear dot1x all
Resetting the 802.1X Configuration to the Default Values
To reset the 802.1X configuration to the default values, perform this task:
Controlling Switch Access with RADIUS
This section describes how to enable and configure the RADIUS, which provides detailed accounting
information and flexible administrative control over authentication and authorization processes.
RADIUS is facilitated through AAA and can be enabled only through AAA commands.
Note For complete syntax and usage information for the commands used in this section, see the Cisco IOS
Security Command Reference, Release 12.2.
These sections contain this configuration information:
• Understanding RADIUS, page 40-93
• RADIUS Operation, page 40-94
• RADIUS Change of Authorization, page 40-94
• Configuring RADIUS, page 40-100
• Displaying the RADIUS Configuration, page 40-113
Command Purpose
Step 1 Switch# configure terminal Enters global configuration mode.
Step 2 Switch(config)# dot1x default Resets the configurable 802.1X parameters to the default values.
Step 3 Switch(config)# end Returns to privileged EXEC mode.
Step 4 Switch# show dot1x all Verifies your entries.
Step 5 Switch# copy running-config
startup-config (Optional) Saves your entries in the configuration file.