Saturday, February 15, 2014

802.1x configuration

Why to use dot1x authentication ? dot1x authentication can be used to secure access to the network. 
enable “aaa” on the switch “ aaa new-model”
Define external radius-servers:
Radius-server host hostname | ip-address} key string
Define the authentication method for 802.1x
Aaa authentication dot1x default group radius
Enable 802.1x globally “dot1x system-auth-control”
Configure each switchport that uses 802.1x
Switch(config-if)#dot1x port-control {force-authorized | force-unauthorized | auto}
Force-authorized: the port always authorize any connected client (default state)
Force-unauthorized: the port is forced to never authorize any connected client (client need to disconnect/reconnect)
Auto: the port uses 802.1x exchange to move from unauthorized to the authorized state
Allow multiple hosts on a switchport
Dot1x host-mode multi-host

“show dot1x all”

If you are looking to find a job remotely, apply here:
https://www.security-architecture.com/add-cv/

No comments:

Post a Comment