Configuring The Host Mode; Configuring Periodic Re-Authentication - Cisco IE 3000 Software Configuration Manual
Hide thumbs
Also See for IE 3000:
- Hardware installation manual (186 pages) ,
- Getting started manual (32 pages) ,
- Software configuration manual (874 pages)
Table of Contents
Advertisement
Configuring IEEE 802.1x Authentication
Configuring the Host Mode
Beginning in privileged EXEC mode, follow these steps to allow a single host (client) or multiple hosts
on an IEEE 802.1x-authorized port that has the dot1x port-control interface configuration command set
to auto. This procedure is optional.
Command
Step 1
configure terminal
Step 2
radius-server vsa send authentication
Step 3
interface interface-id
Step 4
dot1x host-mode {single-host |
multi-host}
Step 5
switchport voice vlan vlan-id
Step 6
end
Step 7
show dot1x interface interface-id
Step 8
copy running-config startup-config
To disable multiple hosts on the port, use the no dot1x host-mode multi-host interface configuration
command.
This example shows how to enable IEEE 802.1x authentication and to allow multiple hosts:
Switch(config)# interface gigabitethernet1/2
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x host-mode multi-host
Switch(config-if)# end
Configuring Periodic Re-Authentication
You can enable periodic IEEE 802.1x client re-authentication and specify how often it occurs. If you do
not specify a time period before enabling re-authentication, the number of seconds between attempts is
3600.
Cisco IE 3000 Switch Software Configuration Guide
10-26
Chapter 10
Purpose
Enter global configuration mode.
Configure the network access server to recognize and use vendor-specific
attributes (VSAs).
Specify the port to which multiple hosts are indirectly attached, and enter
interface configuration mode.
The keywords have these meanings:
•
single-host–Allow a single host (client) on an
IEEE 802.1x-authorized port.
•
multi-host–Allow multiple hosts on an IEEE 802.1x-authorized port
after a single host has been authenticated.
Make sure that the dot1x port-control interface configuration command
set is set to auto for the specified interface.
(Optional) Configure the voice VLAN.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring IEEE 802.1x Port-Based Authentication
OL-13018-01
Advertisement
Chapters
Table of Contents
Troubleshooting
