Security Fundamentals Build ~7 min

Enable 802.1X on the access port

Make users authenticate before Fa0/1 opens. Turn on AAA, point it at the RADIUS server 10.0.0.10 (key CISCO123), enable 802.1X globally, then make Fa0/1 an authenticator with port-control auto.

SW1

Objectives

○aaa new-model enabled
○802.1X via RADIUS as default auth method
○dot1x system-auth-control enabled
○Fa0/1 port-control set to auto
○Fa0/1 role = authenticator

Hint

Full sequence

enable
configure terminal
 aaa new-model
 aaa authentication dot1x default group radius
 radius-server host 10.0.0.10 key CISCO123
 dot1x system-auth-control
 interface fa0/1
  switchport mode access
  authentication port-control auto
  dot1x pae authenticator
  end

← Previous task

Write an extended ACL

Security Fundamentals · ~7 min