Configuring flexible authentication ordering, Configuring open1x, Configuring flexible authentication – Dell POWEREDGE M1000E User Manual

Page 322

Advertising
background image

10-60

Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide

OL-13270-03

Chapter 10 Configuring IEEE 802.1x Port-Based Authentication

Configuring IEEE 802.1x Authentication

This example shows how to configure a switch for a downloadable policy:

Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)# aaa new-model

Switch(config)# aaa authorization network default group radius

Switch(config)# ip device tracking

Switch(config)# ip access-list extended default_acl

Switch(config-ext-nacl)# permit ip any any

Switch(config-ext-nacl)# exit

Switch(config)# radius-server vsa send authentication

Switch(config)# int fastEthernet 2/13

Switch(config-if)# ip access-group default_acl in

Switch(config-if)# exit

Configuring Flexible Authentication Ordering

Beginning in privileged EXEC mode, follow these steps:

This example shows how to configure a port attempt 802.1x authentication first, followed by web
authentication as fallback method:

Switch# configure terminal

Switch(config)# interface gigabitethernet 1/0/1

Switch(config)# authentication order dot1x webauth

Configuring Open1x

Beginning in privileged EXEC mode:

Step 12

show ip device tracking all

Displays information about the entries in the IP device tracking table.

Step 13

copy running-config startup-config

(Optional) Saves your entries in the configuration file.

Command

Purpose

Command

Purpose

Step 1

configure terminal

Enter global configuration mode.

Step 2

interface interface-id

Specify the port to be configured, and enter interface
configuration mode.

Step 3

authentication order dot1x | mab {webauth}

(Optional) Set the order of authentication methods used on a port.

Step 4

authentication priority dot1x | mab
{webauth}

(Optional) Add an authentication method to the port-priority list.

Step 5

show authentication

(Optional) Verify your entries.

Step 6

copy running-config startup-config

(Optional) Save your entries in the configuration file.

Command

Purpose

Step 1

configure terminal

Enter global configuration mode.

Step 2

interface interface-id

Specify the port to be configured, and enter interface
configuration mode.

Advertising