Authentication of users through Catalyst switches

[venancio.martinez]

We would like to configure security in this way: the user, when he wants to enter the network, he has to log in with a radius server (ACS). If the user don't get authenticate, the port of the switch doesn't give access to the network to that port. We don't want authentication of MAC address, it is easy to configure but difficult to manage. Anyone can suggest some way to do that?

Thank you very much.

[bbranch]

You can use 802.1x to cause the users to authenticate against a RADIUS server when they require network access, if they do not pass the authentication the port will not pass data.

The 6500 config guide for this on CCO is:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_7_4/confg_gd/authent.htm#xtocid10

and for the 3350:

http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12111ea1/3550scg/sw8021x.htm#xtocid6