SUMMARY STEPS
1. configure terminal
2. aaa new-model
3. aaa authentication dot1x {default} method1
4. dot1x system-auth-control
5. aaa authorization network {default} group radius
6. radius-server host ip-address
7. radius-server key string
8. interface interface-id
9. switchport mode access
10. authentication port-control auto
11. dot1x pae authenticator
12. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2
aaa new-model
Example:
Switch(config)# aaa new-model
Step 3
aaa authentication dot1x {default} method1
Example:
Switch(config)# aaa authentication dot1x
default group radius
Enters the global configuration mode.
Enables AAA.
Creates an 802.1x authentication method list.
To create a default list that is used when a named list is not
specified in the authentication command, use the default keyword
followed by the method that is to be used in default situations.
The default method list is automatically applied to all ports.
For method1, enter the group radius keywords to use the list of
all RADIUS servers for authentication.
Note
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
How to Configure 802.1x Port-Based Authentication
Purpose
Though other keywords are visible in the command-line
help string, only the group radius keywords are
supported.
1363