topic Re: aaa do1x configured locally without server in Network Access Control

aaa do1x configured locally without server

Sarg . — Sun, 10 Mar 2019 23:03:19 GMT

Hello people, I am having some problems test AAA authenitication.

Here are the commands I have on the switch.

username cisco password cisco

aa new-model

aaa authentication dot1x default-local

dot1x system-auth-control

int fa 0/3

switchport host

switchport access vlan 3

dot1x port-control

after this configuration my port goes yellow obviously cos I have not entered the password. I tried to enable authentication features on the local area connection properties box on the PC but it does not prompt me to enter password after all my attempts Please does anyone have a solution for me. Thanks

Re: aaa do1x configured locally without server

Premdeep Banga — Sat, 23 Aug 2008 19:16:05 GMT

is the command

aaa authentication dot1x default local,

aaa authentication dot1x default-local

Use the first one.

And if you are using Window PC, then by default its configured for smart card/EAP-TLS authentication, change it to MD5 and try.

Regards,

Prem

Please rate if it helps!

Re: aaa do1x configured locally without server

Sarg . — Sat, 23 Aug 2008 20:22:31 GMT

Thanks i will try this when i get back to school after bank holiday monday. Thanks

I'll be sure to give u feed backs

cheers

Re: aaa do1x configured locally without server

Sarg . — Tue, 26 Aug 2008 21:10:24 GMT

Thanks so much pal. Everything when rather well. The PC now prompts me for user name password. I noted that it also asked me for domain-name.

I was not too sure about the importance of this so i just went into the switch anyway added

(config)# ip domain-name cisco

anyway, once i was through doing that i went to the PC and add the login and password but the PC reports back that it failed to authenticate.

I then went back into the switch and add

(config )# Username cisco password cisco level 15

and still the PC keeps informing me that it can not authenticate with a 'failed to authenticate' report was then wondering if my PC actually supports Extensible Authentication Protocol

could this be the problem? if so , how can i cross check this?

cheers for you time

thanks

Re: aaa do1x configured locally without server

Premdeep Banga — Tue, 26 Aug 2008 22:00:21 GMT

to be frank, what you are doing, no one does that i.e. using routers/switch local database. I am not sure, I might have to look it up. But I dont think router/switch local database supports EAP-MD5. As far as domain goes, leave it blank when filling that information for authentication.

I would suggest if you are testing, use an ACS for Windows trial version, as a Radius server.

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-eval

Regards,

Prem

Please rate if it helps!

Re: aaa do1x configured locally without server

Sarg . — Tue, 26 Aug 2008 22:23:39 GMT

Yeah, i can understand. I am a student.I am just trying some hands-on-labs

cheer for the effort

Re: aaa do1x configured locally without server

Sarg . — Tue, 26 Aug 2008 22:25:12 GMT

I cant seem to get anything of the link

Re: aaa do1x configured locally without server

Premdeep Banga — Tue, 26 Aug 2008 22:29:18 GMT

you must have a valid cisco.com profile. If you dont, please Register, you should be able to download the trial.

Regards,

Prem

Please rate if it helps!