Users Guide

Authentication, Authorization, and Accounting 321
console(config)#radius server auth 172.25.129.229
console(config-auth-radius)#name Default-Radius-Server
console(config-auth-radius)#primary
console(config-auth-radius)#usage authmgr
console(config-auth-radius)#key “dellSecret”
console(config)#exit
10 Configure the management interface and bypass 802.1x authentication for
the connected management host:
console(config)#interface Gi1/0/1
console(config-if-Gi1/0/1)#switchport access vlan 60
console(config-if-Gi1/0/1)#authentication port-control force-
authorized
console(config-if-Gi1/0/1)#ip access-group RADIUSCAP in 1
console(config)#exit
11 Configure a dedicated printer port. This ports is enabled for MAB only.
The VLAN is assigned by the RADIUS server:
console(config)#interface Gi1/0/21
console(config-if-Gi1/0/21)#switchport mode access
console(config-if-Gi1/0/21)#authentication port-control auto
console(config-if-Gi1/0/21)#authentication host-mode single-
host
console(config-if-Gi1/0/21)#dot1x pae authenticator
console(config-if-Gi1/0/21)#mab
console(config-if-Gi1/0/21)#authentication order mab
console(config-if-Gi1/0/21)#authentication priority mab
console(config-if-Gi1/0/21)#exit
12 Configure a port for authentication using MAB or 802.1X. The timers are
configured to quickly authenticate:
console(config)#interface Gi1/0/22
console(config-if-Gi1/0/22)#switchport mode access
console(config-if-Gi1/0/22)#authentication port-control auto
console(config-if-Gi1/0/22)#authentication periodic
console(config-if-Gi1/0/22)#authentication timer
reauthenticate 7200
console(config-if-Gi1/0/22)#authentication timer restart 60
console(config-if-Gi1/0/22)#dot1x timeout server-timeout 10
console(config-if-Gi1/0/22)#dot1x timeout quiet-period 10
console(config-if-Gi1/0/22)#dot1x timeout supp-timeout 2
console(config-if-Gi1/0/22)#dot1x max-req 2
console(config-if-Gi1/0/22)#dot1x timeout tx-period 3
console(config-if-Gi1/0/22)#authentication host-mode multi-
domain
console(config-if-Gi1/0/22)#mab