Cisco Systems 3560 사용자 설명서

This example shows how to configure a switch for a downloadable policy: 

Switch# config terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Switch(config)# aaa new-model

Switch(config)# aaa authorization network default group radius

Switch(config)# ip device tracking

Switch(config)# ip access-list extended default_acl

Switch(config-ext-nacl)# permit ip any any

Switch(config-ext-nacl)# exit

Switch(config)# radius-server vsa send authentication

Switch(config)# int fastEthernet 2/13

Switch(config-if)# ip access-group default_acl in

Switch(config-if)# exit

Beginning in privileged EXEC mode, follow these steps:

This example shows how to configure a port attempt 802.1x authentication first, followed by web 
authentication as fallback method:

Switch# configure terminal

Switch(config)# interface gigabitethernet 1/0/1

Switch(config)# authentication order dot1x webauth

show ip device tracking all 

Displays information about the entries in the IP device tracking table.

(Optional) Saves your entries in the configuration file.

Enter global configuration mode.

interface interface-id

Specify the port to be configured, and enter interface 
configuration mode.

authentication order [dot1x | mab] | 
{webauth}

(Optional) Set the order of authentication methods used on a port. 

authentication priority [dot1x | mab] | 
{webauth}

(Optional) Add an authentication method to the port-priority list. 

show authentication 

(Optional) Verify your entries.

(Optional) Save your entries in the configuration file.