Users Guide

360 Authentication, Authorization, and Accounting
console(config-if)#dot1x port-control force-authorized
console(config-if)#exit
4 Configure Port 7 to require MAC-based authentication with MAB. By
default, EAP-MD5 authentication is used.
console(config)#interface gi1/0/7
console(config-if-Gi1/0/7)#dot1x port-control mac-based
console(config-if-Gi1/0/7)#mab
5 Configure the port in general mode. General mode is required for MAC-
based authentication.
console(config-if-Gi1/0/7)#switchport mode general
console(config-if-Gi1/0/7)#exit
6 Enable MAC-based authentication on port 8 and limit the number of
devices that can authenticate on that port to 2.
console(config)#interface gi1/0/8
console(config-if-Gi1/0/8)#dot1x port-control mac-based
console(config-if-Gi1/0/8)#dot1x max-users 2
7 Configure the port in general mode. General mode is required for MAC-
based authentication.
console(config-if-Gi1/0/8)#switchport mode general
console(config-if-Gi1/0/8)#exit
console(config)#exit
8 View the client connection status.
When the clients on Ports 1, 3, and 7(supplicants), attempt to
communicate via the switch, the switch challenges the supplicants for
802.1X credentials. The switch encrypts the provided information and
transmits it to the RADIUS server. If the RADIUS server grants access, the
system sets the 802.1X port state of the interface to authorized and the
supplicants are able to access network resources.
console#show dot1x clients all
Interface...................................... Gi1/0/1
User Name...................................... barneyr
Supp MAC Address............................... 0012.1753.031A
Session Time................................... 756
Filter Id......................................
DACL Name......................................
RADIUS Framed IPv4/IPv6 address................
VLAN Assigned.................................. 1 (Default)