Cisco Switch

802.1x configuration required on Cisco switch

Perquisites

•Ensure switch has a valid Test VLAN with a Layer 3 gateway where it can reach a DHCP.server. Prior to applying any dot1x configuration ensure the test client can obtain a DHCP IP using the test port on the switch.

•You will need the IP of the NPS server.

•The key you entered you configuring network policy.

Configure terminal

dot1x system-auth-control

aaa new-model

aaa authentication dot1x default group radius

aaa authorization network default group radius

aaa accounting dot1x default start-stop group radius

ip radius source-interface VlanNo

radius-server host IP of NPS server auth-port 1812 acct-port 1813 key xxxx

DOT1x port configuration

Configure terminal

interface GigabitEthernetx/x/x

switchport access vlan NO

switchport mode access

authentication order dot1x

authentication port-control auto

authentication violation restrict

dot1x pae authenticator

save changes