HP AM866A Brocade Converged Enhanced Ethernet Administrator's Guide 6.3.0 (53- - Page 140
x authentication configuration tasks, Con authentication between the switch and CNA or NIC
UPC - 884420064602
View all HP AM866A manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 140 highlights
10 802.1x authentication configuration tasks 802.1x authentication configuration tasks The tasks in this section describe the common 802.1x operations that you will need to perform. For a complete description of all the available 802.1x CLI commands for the Brocade FCoE hardware, see the Converged Enhanced Ethernet Command Reference. Configure authentication between the switch and CNA or NIC For complete information on the aaaConfig command, see the Fabric OS Command Reference and the Fabric OS Administrator's Guide. NOTE The aaaConfig command attempts to connect to the first RADIUS server. If the RADIUS server is not reachable, the next RADIUS server is contacted. However, if the RADIUS server is contacted and the authentication fails, the authentication process does not check for the next server in the sequence. Perform the following steps to configure authentication. 1. Connect to the switch and log in using an account assigned to the admin role. 2. Add the RADIUS to the switch as the authentication server. This FOS CLI command moves the new RADIUS server to the top of the access list. switch:admin> aaaconfig --add 10.2.2.147 -conf radius 1 3. Enter global configuration mode. switch:admin>cmsh switch#configure t 4. Enable 802.1x authentication globally switch(config)#dot1x enable 5. Enter the copy command to save the running-config file to the startup-config file. switch(config)#end switch#copy running-config startup-config Interface-specific administrative tasks for 802.1x It is most efficient to configure the 802.1z port authentication protocol globally on the Brocade FCoE hardware, and then make customized changes to specific interface ports. Since all of the interfaces were enabled and configured in "802.1x authentication configuration tasks", use the administrative tasks in this section to make any necessary customizations to specific interface port settings. Configuring 802.1x on specific interface ports To configure 802.1x port authentication on a specific interface port, perform the following steps from Privileged EXEC mode. Repeat this task for each interface port you wish to modify. 1. Enter the configure terminal command to enter global configuration mode. 120 Converged Enhanced Ethernet Administrator's Guide 53-1001346-01