Difference between revisions of "Netband Project - 802.1x"
From Teknologisk videncenter
(→Configuration) |
(→Configuration) |
||
| Line 20: | Line 20: | ||
aaa group server radius Hq_radius_server | aaa group server radius Hq_radius_server | ||
server 10.1.1.11 auth-port 1645 acct-port 1646 | server 10.1.1.11 auth-port 1645 acct-port 1646 | ||
| + | ! | ||
| + | radius-server key ciscodisco | ||
</pre> | </pre> | ||
*12.2(46)SE and earlier | *12.2(46)SE and earlier | ||
| Line 27: | Line 29: | ||
dot1x violation-mode protect | dot1x violation-mode protect | ||
! | ! | ||
| − | |||
</pre> | </pre> | ||
*12.2(50)SE or later | *12.2(50)SE or later | ||
Revision as of 10:02, 20 April 2009
<accesscontrol>NetBand</accesscontrol> This page is part of the Netband Project
- provides accesscontrol at the switchport
- Consists of
- Auhtenticator
- The device that handles the authentication on behalf of the clients
- Supplicant(client)
- The clients conencting to the network
- Authentication server
- Radius server
- Auhtenticator
Configuration
aaa new-model ! dot1x system-auth-control ! aaa authentication dot1x default group Hq_radius_server ! aaa group server radius Hq_radius_server server 10.1.1.11 auth-port 1645 acct-port 1646 ! radius-server key ciscodisco
- 12.2(46)SE and earlier
interface FastEthernet0/10 dot1x port-control auto dot1x host-mode single-host dot1x violation-mode protect !
- 12.2(50)SE or later
interface FastEthernet0/10 authentication port-control auto authentication host-mode authentication violation protect