Cisco 2950 - Catalyst Switch Configuration Manual page 10

Contents
Configuring 802.1x Port-Based Authentication
10
C H A P T E R
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
x
Configuring RADIUS
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Displaying the RADIUS Configuration
Configuring the Switch for Local Authentication and Authorization
Configuring the Switch for Secure Shell
Understanding SSH
9-33
SSH Servers, Integrated Clients, and Supported Versions
Limitations
9-34
Configuring SSH
9-34
Configuration Guidelines
Cryptographic Software Image Guidelines
Setting Up the Switch to Run SSH
Configuring the SSH Server
Displaying the SSH Configuration and Status
Understanding 802.1x Port-Based Authentication
Device Roles
10-2
Authentication Initiation and Message Exchange
Ports in Authorized and Unauthorized States
802.1x Accounting
10-5
Supported Topologies
Using 802.1x with Port Security
Using 802.1x with Voice VLAN Ports
Using 802.1x with VLAN Assignment
Using 802.1x with Guest VLAN
Configuring 802.1x Authentication
Default 802.1x Configuration
802.1x Configuration Guidelines
Upgrading from a Previous Software Release
Enabling 802.1x Authentication
9-20
9-20
9-21
9-23
9-25
9-28
9-31
9-33
9-34
9-35
9-35
9-36
9-37
10-1
10-1
10-4
10-5
10-6
10-7
10-7
10-8
10-9
10-9
10-10
10-11
10-11
9-29
9-29
9-32
9-33
10-3
9-27
9-30
78-11380-10