From: ian (iyux2000@gmail.com)
Date: Sat Mar 17 2007 - 20:50:51 ART
cj9352,How are you#!
I checked the link you provided. I see that " Though other keywords are visible in the command-line help string, only the group radius keywords are supported. "
It is contrary to what you configured " aaa authentication dot1x default none " .
Thank you for your reply.
======= 2007-03-18 06:47:58 What you've mentioned in your letter#:=======
>i came across this a couple months ago.
>
>http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12235se/scg1/sw8021x.htm
>config t
>dot1x system-auth-control
>dot1x guest-vlan supplicant
>!
>aaa new-model
>aaa authentication login ????VTY line
>aaa authentication login CONN none
>aaa authentication dot1x default none
>aaa session-id common
>!
>interface FastEthernet0/10
>switchport mode access
>dot1x pae authenticator
>dot1x port-control force-unauthorized
>dot1x guest-vlan ??
>dot1x auth-fail vlan ??
>!
>line con 0
>login authentication CONN
>password ccie
>line vty 0 4
>login authentication ???VTY
>
>
>----- Original Message -----
>From: matt netw
>Date: Saturday, March 17, 2007 3:02 pm
>Subject: Re: dot1x guest vlan-supplicant
>To: "cj9352@optonline.net"
>Cc: ccielab@groupstudy.com
>
>> Yes, is correct.
>>
>> also the same the point ask you " you are not allowed to
>> configure aaa
>> authentication server", this tell me: do not configure radius for
>> authentication, and how I configure authentication, via local DDBB?.
>>
>> Thanks,
>>
>> Matt.
>>
>>
>>
>> 2007/3/17, cj9352@optonline.net :
>> >
>> > Good ? Is your config similar to this one?
>> >
>> >
>> > dot1x system-auth-control
>> > dot1x guest-vlan supplicant
>> >
>> > !
>> > interface FastEthernet0/7
>> > switchport mode access
>> > dot1x port-control auto
>> > dot1x host-mode multi-host
>> > dot1x guest-vlan 10
>> > spanning-tree portfast
>> >
>> >
>> > ----- Original Message -----
>> > From: matt netw
>> > Date: Friday, March 16, 2007 1:17 pm
>> > Subject: dot1x guest vlan-supplicant
>> > To: ccielab@groupstudy.com
>> >
>> > > Hi GS,
>> > >
>> > > the dot1x guest-vlan supplicant command, is always mandatory?
>> > > even if I dont
>> > > use one of them Authentication Fail or Guest-vlan.
>> > >
>> > > Thakns to all,
>> > >
>> > > Matt.
>> > >
>> > >
>> _______________________________________________________________________> > Subscription information may be found at:
>> > > http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
= = = = = = = = = = = = = = = = = = = =
!!!!!!!!!!!!!!!!Have a nice day.
!!!!!!!!!!!!!!!!ian
!!!!!!!!!!!!!!!!iyux2000@gmail.com
!!!!!!!!!!!!!!!!!!!!2007-03-18
This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:51 ART