From: Joe Mama (jsmith1234550@gmail.com)
Date: Wed May 30 2007 - 10:16:46 ART
Hello all,
I believe that I have the right question as it's fairly
straightforward. However, does anyone see a proctor in the CCIE lab
having an issue with the config since the radius is the 3rd one down
on the list. If it was the first one on the list (before the
aaa....locals), would that be more correct? How stringent are the
requirements? I added the local
Lab ?: Configure the default behavior of dot1x authentication to use
Radius as the primary method of authentication.
sw1(config)#dot1x system-auth-control
sw1(config)#aaa new-model
sw1(config)#aaa authentication login LocalCon none
sw1(config)#aaa authentication login LocalVTY none
sw1(config)#aaa authentication dot1x default group radius
sw1(config)#radius-server host 192.168.100.1166 key asdf
sw1(config)#line con 0
sw1(config-line)#login authentication LocalCon
sw1(config-line)#line vty 0 4
sw1(config-line)#login authentication LocalVTY
sw1(config-line)#
Regards,
Joe
This archive was generated by hypermail 2.1.4 : Fri Jun 01 2007 - 06:55:22 ART