Cisco 802.1X: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 23: Zeile 23:
 
=Konfig dot1x Allgmein=
 
=Konfig dot1x Allgmein=
 
*configure terminal
 
*configure terminal
 +
*aaa authentication dot1x default group radius
 
*dot1x system-auth-control
 
*dot1x system-auth-control
 +
*identity profile default
 
*interface GigabitEthernet1/0/23
 
*interface GigabitEthernet1/0/23
 
**switchport mode access
 
**switchport mode access

Version vom 8. Oktober 2020, 14:02 Uhr

Allgemeine Konfiguration

Änderungen am Freeradius für Vlan Delegation

  • cat /etc/freeradius/eap.conf
ttls {
	use_tunneled_reply = yes
      }	
peap {
	use_tunneled_reply = yes
      }
  • cat /etc/freeradius/eap.conf

User Erwin in Vlan 10

"erwin" Cleartext-Password := "oimel" 
	Tunnel-Type = 13, 
      	Tunnel-Medium-Type = 6, 
      	Tunnel-Private-Group-Id = 10 

Konfig dot1x Allgmein

  • configure terminal
  • aaa authentication dot1x default group radius
  • dot1x system-auth-control
  • identity profile default
  • interface GigabitEthernet1/0/23
    • switchport mode access
    • authentication port-control auto
    • dot1x pae authenticator
    • end

Links