Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Blue

Quick dot1x question

Whats the purpose of configuring dot1x globally but not configuing it on any interface? Does that have a purpose?

Could this be a config that someone abandoned at some point?

aaa authentication dot1x default group radius none

radius-server host 10.163.53.40 auth-port 1812 acct-port 1813

radius-server host 10.163.53.39 auth-port 1812 acct-port 1813

radius-server host 10.161.67.15 auth-port 1812 acct-port 1813

radius-server host 10.160.17.25 auth-port 1812 acct-port 1813

radius-server source-ports 1645-1646

radius-server key 7 <removed>

dot1x system-auth-control

Thanks

2 REPLIES
New Member

Re: Quick dot1x question

Assuming this configuration is on a switch, Dot1x is disabled by default on each interface (dot1x port-control force-authorized) so enabling dot1x globally without setting "dot1x port-control auto" effectively does nothing. Maybe someone configured it for a proof of concept on a couple of ports but never went forward with a deployment. It can be a royal pain to support.

Blue

Re: Quick dot1x question

I agree with your assessment....I wanted a second pair of eyes looking at it...

Thanks

Victor

126
Views
5
Helpful
2
Replies
CreatePlease to create content