Cisco Systems 3560 Manual De Usuario

Beginning in privileged EXEC mode, follow these steps to configure 802.1x accounting after AAA is 
enabled on your switch. This procedure is optional.

Use the show radius statistics privileged EXEC command to display the number of RADIUS messages 
that do not receive the accounting response message.

This example shows how to configure 802.1x accounting. The first command configures the RADIUS 
server, specifying 1813 as the UDP port for accounting:

Switch(config)# radius-server host 172.120.39.46 auth-port 1812 acct-port 1813 key rad123

Switch(config)# aaa accounting dot1x default start-stop group radius

Switch(config)# aaa accounting system default start-stop group radius

When you configure a guest VLAN, clients that are not 802.1x-capable are put into the guest VLAN 
when the server does not receive a response to its EAP request/identity frame. Clients that 
are 802.1x-capable but that fail authentication are not granted network access. The switch supports guest 
VLANs in single-host or multiple-hosts mode.

Beginning in privileged EXEC mode, follow these steps to configure a guest VLAN. This procedure is 
optional.

Enter global configuration mode.

interface interface-id

Specify the port to be configured, and enter interface configuration mode.

Enable 802.1x accounting using the list of all RADIUS servers.

(Optional) Enables system accounting (using the list of all RADIUS 
servers) and generates system accounting reload event messages when the 
switch reloads.

Return to privileged EXEc mode.

Verify your entries.

(Optional) Saves your entries in the configuration file.

Enter global configuration mode.

interface interface-id

Specify the port to be configured, and enter interface configuration mode. 
For the supported port types, see the 

or 

Set the port to access mode 

or 

Configure the Layer 2 port as a private-VLAN host port.

or

Enable 802.1x authentication on the port.