Cisco Systems 3560 Manual De Usuario

10-55

Catalyst 3560 Switch Software Configuration Guide

OL-8553-06

Chapter 10 Configuring IEEE 802.1x Port-Based Authentication

Configuring 802.1x Authentication

This example shows how to configure a switch as an 802.1x authenticator:

Switch# configure terminal

Switch(config)# cisp enable

Switch(config)# interface gigabitethernet2/0/1

Switch(config-if)# switchport mode access

Switch(config-if)# authentication port-control auto

Switch(config-if)# dot1x pae authenticator

Switch(config-if)# spanning-tree portfast trunk

Beginning in privileged EXEC mode, follow these steps to configure a switch as a supplicant:

Step 3

interface interface-id

Specify the port to be configured, and enter interface configuration
mode.

Step 4

switchport mode access

(Optional) Set the port mode to access.

Step 5

authentication port-control auto

Set the port-authentication mode to auto.

Step 6

dot1x pae authenticator

Configure the interface as a port access entity (PAE) authenticator.

Step 7

spanning-tree portfast

Enable Port Fast on an access port connected to a single workstation or
server..

Step 8

end

Return to privileged EXEC mode.

Step 9

show running-config interface
interface-id

Verify your configuration.

Step 10

copy running-config startup-config

(Optional) Save your entries in the configuration file.

Command

Purpose

Command

Purpose

Step 1

configure terminal

Enter global configuration mode.

Step 2

cisp enable

Enable CISP.

Step 3

dot1x credentials profile

Create 802.1x credentials profile. This must be attached to the port that
is configured as supplicant.

Step 4

username suppswitch

Create a username.

Step 5

password password

Create a password for the new username.

Step 6

interface interface-id

Specify the port to be configured, and enter interface configuration
mode.

Step 7

switchport trunk encapsulation
dot1q

Set the port to trunk mode.

Step 8

switchport mode trunk

Configure the interface as a VLAN trunk port.

Step 9

dot1x pae supplicant

Configure the interface as a port access entity (PAE) supplicant.

Step 10

dot1x credentials profile-name

Attach the 802.1x credentials profile to the interface.

Step 11