Cisco 802.1X: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 11: Zeile 11:
 
use_tunneled_reply = yes
 
use_tunneled_reply = yes
 
       }
 
       }
 +
</pre>
 +
*cat  /etc/freeradius/eap.conf
 +
=User Erwin in Vlan 10=
 +
<pre>
 +
"erwin" Cleartext-Password := "oimel"
 +
Tunnel-Type = 13,
 +
      Tunnel-Medium-Type = 6,
 +
      Tunnel-Private-Group-Id = 10
 
</pre>
 
</pre>
  

Version vom 26. April 2016, 12:56 Uhr

Allgemeine Konfiguration

Änderungen am Freeradius für Vlan Delegation

  • cat /etc/freeradius/eap.conf
ttls {
	use_tunneled_reply = yes
      }	
peap {
	use_tunneled_reply = yes
      }
  • cat /etc/freeradius/eap.conf

User Erwin in Vlan 10

"erwin" Cleartext-Password := "oimel" 
	Tunnel-Type = 13, 
      	Tunnel-Medium-Type = 6, 
      	Tunnel-Private-Group-Id = 10 

Konfig dot1x Allgmein

  • configure terminal
  • dot1x system-auth-control
  • interface GigabitEthernet1/0/23
    • switchport mode access
    • authentication port-control auto
    • dot1x pae authenticator
    • end

Links