Configuring The Host Mode - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Configuring 802.1x Authentication
You also need to configure some settings on the RADIUS server. These settings include the IP address
of the switch and the key string to be shared by both the server and the switch. For more information,
see the RADIUS server documentation.
Configuring the Host Mode
Beginning in privileged EXEC mode, follow these steps to allow a single host (client) or multiple hosts
on an 802.1x-authorized port that has the authentication port-control interface configuration command
set to auto. Use the multi-domain keyword to configure multidomain authentication (MDA) to enable
authentication of both a host and a voice device, such as an IP phone (Cisco or non-Cisco) on the same
switch port.
This procedure is optional.
Command
Step 1
configure terminal
Step 2
radius-server vsa send authentication
Step 3
interface interface-id
Step 4
authentication host-mode [multi-auth |
multi-domain | multi-host |
single-host]
Step 5
switchport voice vlan vlan-id
Step 6
end
Step 7
show authentication interface
interface-id
Step 8
copy running-config startup-config
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
10-46
Chapter 10
Purpose
Enter global configuration mode.
Configure the network access server to recognize and use vendor-specific
attributes (VSAs).
Specify the port to which multiple hosts are indirectly attached, and enter
interface configuration mode.
The keywords have these meanings:
multi-auth–Allow one client on the voice VLAN and multiple
•
authenticated clients on the data VLAN. Each host is individually
authenticated.
Note
The multi-auth keyword is only available with the
authentication host-mode command.
multi-host–Allow multiple hosts on an 802.1x-authorized port after
•
a single host has been authenticated.
•
multi-domain–Allow both a host and a voice device, such as an IP
phone (Cisco or non-Cisco), to be authenticated on
an 802.1x-authorized port.
You must configure the voice VLAN for the IP phone when the
Note
host mode is set to multi-domain. For more information, see
Chapter 15, "Configuring Voice VLAN."
single-host–Allow a single host (client) on an 802.1x-authorized
•
port.
Make sure that the authentication port-control interface configuration
command set is set to auto for the specified interface.
(Optional) Configure the voice VLAN.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring IEEE 802.1x Port-Based Authentication
OL-26520-01
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
