KB.15.15

3. Configure an authentication method. Options include 802.1X, web-based authentication, and

MAC authentication. You can configure 802.1X, web-based authentication, and/or MAC

authentication to operate simultaneously on the same ports.

802.1X Option:

Syntax:

aaa port-access authenticator <port-list>

aaa authentication port-access chap-radius

aaa port-access authenticator active

These commands configure 802.1X port-based access control on the switch, and

activates this feature on the specified ports. For more on 802.1X configuration and

operation, see “User authentication methods” (page 337).

MAC Authentication Option:

Syntax:

aaa port-access mac-based <port-list>

This command configures MAC authentication on the switch and activates this

feature on the specified ports. For more on MAC authentication, see “Web-based

and MAC authentication” (page 72).

Web Authentication Option:

Syntax:

aaa port-access web-based <port-list>

This command configures web-based authentication on the switch and activates

this feature on the specified ports. For more on web-based authentication, see

“Web-based and MAC authentication” (page 72).

Viewing

Viewing the currently active per-port CoS and rate-limiting configuration

While a RADIUS-assigned client session is active on a given port, any RADIUS-imposed values for

the settings listed in “Application of RADIUS-Assigned Values” (page 201) are applied as shown:

200 RADIUS server support for switch services