Cisco Mac Authentication Bypass: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(5 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
 
=Radiusanbindung=
 
=Radiusanbindung=
 +
*[[freeradius switch mac authentication bypass]]
 
*[[Cisco Radiusanbindung]]
 
*[[Cisco Radiusanbindung]]
 +
 +
=Allgemeine Konfiguration=
 +
* aaa new-model
 +
*aaa authentication dot1x default group radius
 +
*aaa authorization network default group radius
 +
*aaa accounting dot1x default start-stop group radius
 +
 
=Interface=
 
=Interface=
 
*config terminal
 
*config terminal
 
*interface GigabitEthernet1/0/24
 
*interface GigabitEthernet1/0/24
*switchport mode access
+
**switchport access vlan 1
*authentication port-control auto
+
**switchport mode access
*spanning-tree portfast
+
**authentication port-control auto
*authentication host-mode single-host
+
**mab
*mab
+
**spanning-tree portfast
*authentication order mab
+
**spanning-tree bpduguard enable
 +
**end
 +
 
 +
=Links=
 +
*http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/config_guide_c17-663759.html

Aktuelle Version vom 25. April 2016, 11:14 Uhr

Radiusanbindung

Allgemeine Konfiguration

  • aaa new-model
  • aaa authentication dot1x default group radius
  • aaa authorization network default group radius
  • aaa accounting dot1x default start-stop group radius

Interface

  • config terminal
  • interface GigabitEthernet1/0/24
    • switchport access vlan 1
    • switchport mode access
    • authentication port-control auto
    • mab
    • spanning-tree portfast
    • spanning-tree bpduguard enable
    • end

Links