PurposeCommand or Action
The switch sends an interim accounting update to the accounting server that is based on
the result of re-authentication.
Step 6
The user disconnects from the port.
Step 7
The switch sends a stop message to the accounting server.
Step 8
Configuring 802.1x Port-Based Authentication
Beginning in privileged EXEC mode, follow these steps to configure 802.1x port-based authentication:
SUMMARY STEPS
1.
configure terminal
2.
aaa new-model
3.
aaa authentication dot1x {default} method1
4.
dot1x system-auth-control
5.
aaa authorization network {default} group radius
6.
radius-server host ip-address
7.
radius-server key string
8.
interface interface-id
9.
switchport mode access
10.
authentication port-control auto
11.
dot1x pae authenticator
12.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enables AAA.aaa new-model
Example:
Switch(config)# aaa new-model
Step 2
Creates an 802.1x authentication method list.
aaa authentication dot1x {default} method1
Step 3
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 307
Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Port-Based Authentication