cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
330
Views
5
Helpful
3
Replies

802.1x

alsayed
Level 1
Level 1

Dear Netpro!

this command enough to come up the 802.1x:

aaa new-model

aaa authentication dot1x default group radius

or

do i need the seconde Line:

aaa authentication login LOCAL line enable local none

then:

//line con 0

login authentication LOCAL

//line vty 0 15

login authentication LOCAL

or No Need it!

many 10xs

3 Replies 3

royalblues
Level 10
Level 10

Ali,

Dot1x is a port authentication that restricts unauthorised clients from connecting to the line.

In additional to above commands you will need the follwoing under the interface that needs to use dot1x

interface

dot1x port-control auto

More info here

http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_9_ea1/configuration/guide/Sw8021x.html

The commands under the consoel and VTY lines would enable aaa on these for the group. If default group is used it applies to all the lines

HTH

Narayan

I Knew the all the Config:but the Question is:

does it comes up without this Comand:

aaa authentication login LOCAL line enable local none

The commands listed by you are the fallback methods for login and i dont think would be nneded for dot1x

Narayan

Review Cisco Networking products for a $25 gift card