RE: dot1x port authentication

From: John Matus (john_matus@hotmail.com)
Date: Thu May 05 2005 - 18:03:21 GMT-3


i think the confusing thing for me is that if you enter the command "aaa
authenentication ?", dot1x is not listed as an option...you have to enter it
manually, so i thought that perhaps this was a group that you had to define
somewhere else so it could be called in this statement <i think that would
be the correct programming description for it>

>From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
>To: "John Matus" <john_matus@hotmail.com>,<ccielab@groupstudy.com>
>Subject: RE: dot1x port authentication
>Date: Thu, 5 May 2005 16:11:48 -0400
>
>John,
>
> Dot1x only goes to radius so there's no need to define a
>specific group.
>
>HTH,
>
>Brian McGahan, CCIE #8593
>bmcgahan@internetworkexpert.com
>
>Internetwork Expert, Inc.
>http://www.InternetworkExpert.com
>Toll Free: 877-224-8987 x 705
>Outside US: 775-826-4344 x 705
>24/7 Support: http://forum.internetworkexpert.com
>Live Chat: http://www.internetworkexpert.com/chat/
>
>
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
>Of
> > John Matus
> > Sent: Thursday, May 05, 2005 1:39 PM
> > To: ccielab@groupstudy.com
> > Subject: dot1x port authentication
> >
> > ok, standard dot1x port authentication via radius. <this is an
> > internetwork
> > expert config>
> > when you create the group "dot1x" in the command "aaa authentication
>dot1x
> > group radius", don't you have to define or 'call' that group somewhere
> > else
> > in some other statement in order for this to work? perhaps there is a
> > group
> > 'dot1x' located on the radius server??
> > TIA.
> >
> >
> >
> > dot1x sys-authencontrol
> > it fa0/1
> > dot1x port-control auto
> >
> > aaa new-model
> > aaa authentication login default none
> > aaa authentication dot1x group radius
> > radius-server host 1.2.3.4 key 1
> >
> > _________________________________________________________________
> > Express yourself instantly with MSN Messenger! Download today - it's
>FREE!
> > http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
> >
> >
>_______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Fri Jun 03 2005 - 10:11:56 GMT-3