Cisco Systems C3850NM410G manual - page 4

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 70
Figure 1. 802.1X with Converged Access
The authentication, authorization, and accounting (AAA) group and RADIUS server are set up on the Cisco
Catalyst 3850. The authentication and authorization are redirected to the ISE server. The wireless clients are set
up to get authenticated using dot1x.
aaa new-model
aaa authentication dot1x CLIENT_AUTH group radius
aaa authorization network CLIENT_AUTH group radius
!
The ISE server is the RADIUS server, and the switch is defined on the ISE server as one of the network devices.
The RADIUS server needs to be defined on the switch.
radius server ise
address ipv4 9.9.9.9 auth-port 1812 acct-port 1813
timeout 60
retransmit 3
key cisco123
!