Security Fundamentals Build ~7 min

Enable 802.1X on the access port

Make users authenticate before Fa0/1 opens. Turn on AAA, point it at the RADIUS server 10.0.0.10 (key CISCO123), enable 802.1X globally, then make Fa0/1 an authenticator with port-control auto.

Topology

SW1

Objectives

○aaa new-model enabled
○802.1X via RADIUS as default auth method
○dot1x system-auth-control enabled
○Fa0/1 port-control set to auto
○Fa0/1 role = authenticator

Hints

Hint 1, where to start

802.1X wants three global pieces first (AAA on, method points at RADIUS, dot1x enabled globally) and only then does the port config make sense.

Hint 2, port role

The switch is the authenticator: it forwards EAP frames between the supplicant (PC) and the authentication server (RADIUS). Enable that role with dot1x pae authenticator, then gate the port with authentication port-control auto.

Hint 3, full sequence

enable
configure terminal
 aaa new-model
 aaa authentication dot1x default group radius
 radius-server host 10.0.0.10 key CISCO123
 dot1x system-auth-control
 interface fa0/1
  switchport mode access
  authentication port-control auto
  dot1x pae authenticator
  end

← Previous task

Write an extended ACL

Security Fundamentals · ~7 min

Stuck on a lab, or not sure what to practice next?

Talk it through with a mentor on a free 20-minute call. We look at your lab, your exam date and your weak spots, and you leave with a plan.

Book free session

Cisco Mentorship

CompTIA Foundation

Firewall Security

Short Courses

More

CCNA v1.1

CCNA v2.0

CCNA Automation

CCNP

Network+

NSE 4

Lab Tasks

Videos

Packet Tracer Labs

Simulators

Enable 802.1X on the access port

Stuck on a lab, or not sure what to practice next?