Brocade Communications Systems 53-1001761-01 사용자 설명서
112
Converged Enhanced Ethernet Administrator’s Guide
53-1001761-01
802.1x authentication configuration tasks
10
DRAFT: BROCADE CONFIDENTIAL
802.1x authentication configuration tasks
The tasks in this section describe the common 802.1x operations that you will need to perform. For
a complete description of all the available 802.1x CLI commands for the Brocade FCoE hardware,
see the Converged Enhanced Ethernet Command Reference.
a complete description of all the available 802.1x CLI commands for the Brocade FCoE hardware,
see the Converged Enhanced Ethernet Command Reference.
Configure authentication
between the switch and CNA or NIC
between the switch and CNA or NIC
For complete information on the aaaConfig command, see the Fabric OS Command Reference and
the Fabric OS Administrator’s Guide.
the Fabric OS Administrator’s Guide.
NOTE
The aaaConfig command attempts to connect to the first RADIUS server. If the RADIUS server is not
reachable, the next RADIUS server is contacted. However, if the RADIUS server is contacted and the
authentication fails, the authentication process does not check for the next server in the sequence.
The aaaConfig command attempts to connect to the first RADIUS server. If the RADIUS server is not
reachable, the next RADIUS server is contacted. However, if the RADIUS server is contacted and the
authentication fails, the authentication process does not check for the next server in the sequence.
Perform the following steps to configure authentication.
1. Connect to the switch and log in using an account assigned to the admin role.
2. Add the RADIUS to the switch as the authentication server. This FOS CLI command moves the
new RADIUS server to the top of the access list.
switch:admin> aaaconfig --add 10.2.2.147 -conf radius 1
3. Enter global configuration mode.
switch:admin>cmsh
switch#configure t
4. Enable 802.1x authentication globally
switch(config)#dot1x enable
5. Enter the copy command to save the running-config file to the startup-config file.
switch(config)#end
switch#copy running-config startup-config
Interface-specific administrative tasks for 802.1x
It is essential to configure the 802.1x port authentication protocol globally on the Brocade FCoE
hardware, and then enable 802.1x and make customized changes for each interface port. Since
802.1x was enabled and configured in
hardware, and then enable 802.1x and make customized changes for each interface port. Since
802.1x was enabled and configured in
administrative tasks in this section to make any necessary customizations to specific interface port
settings.
settings.
Configuring 802.1x on specific interface ports
To configure 802.1x port authentication on a specific interface port, perform the following steps
from Privileged EXEC mode. Repeat this task for each interface port you wish to modify.
from Privileged EXEC mode. Repeat this task for each interface port you wish to modify.
1. Enter the configure terminal command to access global configuration mode.