Cisco Mac Authentication Bypass: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Thomas (Diskussion | Beiträge) Keine Bearbeitungszusammenfassung |
Thomas (Diskussion | Beiträge) |
||
| (6 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 1: | Zeile 1: | ||
=Radiusanbindung= | |||
*[[freeradius switch mac authentication bypass]] | |||
*[[Cisco Radiusanbindung]] | |||
=Allgemeine Konfiguration= | |||
* aaa new-model | |||
*aaa authentication dot1x default group radius | |||
*aaa authorization network default group radius | |||
*aaa accounting dot1x default start-stop group radius | |||
=Interface= | =Interface= | ||
*config terminal | *config terminal | ||
*interface GigabitEthernet1/0/24 | *interface GigabitEthernet1/0/24 | ||
*switchport mode access | **switchport access vlan 1 | ||
*authentication port-control auto | **switchport mode access | ||
*spanning-tree portfast | **authentication port-control auto | ||
* | **mab | ||
* | **spanning-tree portfast | ||
* | **spanning-tree bpduguard enable | ||
**end | |||
=Links= | |||
*http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/config_guide_c17-663759.html | |||
Aktuelle Version vom 25. April 2016, 11:14 Uhr
Radiusanbindung
Allgemeine Konfiguration
- aaa new-model
- aaa authentication dot1x default group radius
- aaa authorization network default group radius
- aaa accounting dot1x default start-stop group radius
Interface
- config terminal
- interface GigabitEthernet1/0/24
- switchport access vlan 1
- switchport mode access
- authentication port-control auto
- mab
- spanning-tree portfast
- spanning-tree bpduguard enable
- end