Cisco Mac Authentication Bypass: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
Zeile 12: Zeile 12:
 
*config terminal
 
*config terminal
 
*interface GigabitEthernet1/0/24
 
*interface GigabitEthernet1/0/24
*switchport access vlan 1
+
**switchport access vlan 1
*switchport mode access
+
**switchport mode access
*authentication port-control auto
+
**authentication port-control auto
*mab
+
**mab
*spanning-tree portfast
+
**spanning-tree portfast
*spanning-tree bpduguard enable
+
**spanning-tree bpduguard enable
 +
**end
  
 
=Links=
 
=Links=
 
*http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/config_guide_c17-663759.html
 
*http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/config_guide_c17-663759.html

Aktuelle Version vom 25. April 2016, 11:14 Uhr

Radiusanbindung

Allgemeine Konfiguration

  • aaa new-model
  • aaa authentication dot1x default group radius
  • aaa authorization network default group radius
  • aaa accounting dot1x default start-stop group radius

Interface

  • config terminal
  • interface GigabitEthernet1/0/24
    • switchport access vlan 1
    • switchport mode access
    • authentication port-control auto
    • mab
    • spanning-tree portfast
    • spanning-tree bpduguard enable
    • end

Links