Cisco HWIC-4ESW User Guide - Page 20

Command or Action, Purpose, aaa authentication dot1x, default, interface, dot1x port-control auto - etherswitch interface cards

Page 20 highlights

How to Configure EtherSwitch HWICs Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards 3. aaa authentication dot1x {default | listname} method1 [method2...] 4. interface interface-type interface-number 5. dot1x port-control auto 6. end 7. show dot1x 8. copy running-config startup-config DETAILED STEPS Command or Action Step 1 enable Step 2 Example: Router> enable configure terminal Purpose Enables privileged EXEC mode. • Enter your password if prompted. Enters global configuration mode. Step 3 Example: Router# configure terminal aaa authentication dot1x {default | listname} method1 [method2...] Example: Router(config)# aaa authentication dot1x default newmethod Step 4 interface interface-type interface-number Step 5 Example: Router(config)# interface fastethernet 0/1/3 dot1x port-control auto Example: Router(config-if)# dot1x port-control auto Step 6 end Creates an 802.1x authentication method list. • To create a default list that is used when a named list is not specified in the authentication command, use the default keyword followed by the methods that are to be used in default situations. The default method list is automatically applied to all interfaces. • Enter at least one of these keywords: - group radius-Use the list of all RADIUS servers for authentication. - none-Use no authentication. The client is automatically authenticated without the switch using the information supplied by the client. Specifies the interface to be enabled for 802.1x authentication and enters interface configuration mode. • Enter the interface type and interface number. Enables 802.1x on the interface. • For feature interaction information with trunk, dynamic, dynamic-access, EtherChannel, secure, and SPAN ports see the "802.1x Configuration Guidelines" section on page 19. Returns to privileged EXEC mode. Example: Router(config-if)# end 20

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
20
3.
aaa authentication dot1x
{
default
|
listname
}
method1
[
method2
...]
4.
interface
interface-type
interface-number
5.
dot1x port-control auto
6.
end
7.
show dot1x
8.
copy running-config startup-config
DETAILED STEPS
Command or Action
Purpose
Step 1
enable
Example:
Router> enable
Enables privileged EXEC mode.
Enter your password if prompted.
Step 2
configure
terminal
Example:
Router# configure terminal
Enters global configuration mode.
Step 3
aaa authentication dot1x
{
default
|
listname
}
method1
[
method2...
]
Example:
Router(config)# aaa authentication dot1x
default newmethod
Creates an 802.1x authentication method list.
To create a default list that is used when a named list is
not
specified in the
authentication
command, use the
default
keyword followed by the methods that are to be
used in default situations. The default method list is
automatically applied to all interfaces.
Enter at least one of these keywords:
group radius
—Use the list of all RADIUS servers
for authentication.
none
—Use no authentication. The client is
automatically authenticated without the switch
using the information supplied by the client.
Step 4
interface
interface-type interface-number
Example:
Router(config)# interface fastethernet 0/1/3
Specifies the interface to be enabled for 802.1x
authentication and enters interface configuration mode.
Enter the interface type and interface number.
Step 5
dot1x port-control auto
Example:
Router(config-if)# dot1x port-control auto
Enables 802.1x on the interface.
For feature interaction information with trunk,
dynamic, dynamic-access, EtherChannel, secure, and
SPAN ports see the
“802.1x Configuration Guidelines”
section on page 19
.
Step 6
end
Example:
Router(config-if)# end
Returns to privileged EXEC mode.