Re: dot1x guest vlan-supplicant

From: cj9352@optonline.net
Date: Sat Mar 17 2007 - 17:43:30 ART


i came across this a couple months ago.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12235se/scg1/sw8021x.htm
config t
dot1x system-auth-control
dot1x guest-vlan supplicant
!
aaa new-model
aaa authentication login ????VTY line
aaa authentication login CONN none
aaa authentication dot1x default none
aaa session-id common
!
interface FastEthernet0/10
switchport mode access
dot1x pae authenticator
dot1x port-control force-unauthorized
dot1x guest-vlan ??
dot1x auth-fail vlan ??
!
line con 0
login authentication CONN
password ccie
line vty 0 4
login authentication ???VTY

----- Original Message -----
From: matt netw
Date: Saturday, March 17, 2007 3:02 pm
Subject: Re: dot1x guest vlan-supplicant
To: "cj9352@optonline.net"
Cc: ccielab@groupstudy.com

> Yes, is correct.
>
> also the same the point ask you " you are not allowed to
> configure aaa
> authentication server", this tell me: do not configure radius for
> authentication, and how I configure authentication, via local DDBB?.
>
> Thanks,
>
> Matt.
>
>
>
> 2007/3/17, cj9352@optonline.net :
> >
> > Good ? Is your config similar to this one?
> >
> >
> > dot1x system-auth-control
> > dot1x guest-vlan supplicant
> >
> > !
> > interface FastEthernet0/7
> > switchport mode access
> > dot1x port-control auto
> > dot1x host-mode multi-host
> > dot1x guest-vlan 10
> > spanning-tree portfast
> >
> >
> > ----- Original Message -----
> > From: matt netw
> > Date: Friday, March 16, 2007 1:17 pm
> > Subject: dot1x guest vlan-supplicant
> > To: ccielab@groupstudy.com
> >
> > > Hi GS,
> > >
> > > the dot1x guest-vlan supplicant command, is always mandatory?
> > > even if I dont
> > > use one of them Authentication Fail or Guest-vlan.
> > >
> > > Thakns to all,
> > >
> > > Matt.
> > >
> > >
> _______________________________________________________________________> > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:51 ART