topic Honestly: I see not a big of in Network Access Control

How to restrict Internet access using RADIUS server through Catalyst 3560 switch

Samrat Bose — Mon, 11 Mar 2019 06:26:34 GMT

Dear All,

I need a configuration help from anybody. I have a small network of 15 users connected to a 3560, which is in-turn connected to a 2811 ISR router. At interface fastethernet 0/24 of the 3560 switch I am planning to connect a unix based RADIUS server. ISP is connected on the opposite side of the 2811 at interface fa0/0.

What I want to do is if anyone among the 15 users tries to access internet, they should be validated in the RADIUS server by their pre-configured user credentials. (I'll store 15 user credentials there). If anybody else tries to connect (except these 15) he/she should be denied internet access.

The RADIUS server will be having a login page to type username/password.

Please guide in terms of what commands I should inject in the 3560 or what specifically I need to have to do this task.

Thanks in advance!!

Samrat.

Honestly: I see not a big of

Florin Barhala — Mon, 01 Feb 2016 20:06:13 GMT

Honestly: I see not a big of a issue Cisco's config. You enable 802.1x and port authorization will be granted or not by the radius server you will config on the switch.

But on the Radius, I think FreeRadius should be more than enough to accomplish this, still can't speak about your exposure to this solution.

I haven't done this in a very

Philip D'Ath — Tue, 02 Feb 2016 12:04:57 GMT

I haven't done this in a very long time, but what you probably want to do is enable web authentication.

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_52_se/configuration/guide/3560scg/swwebauth.html

I would also do the Web

Philip D'Ath — Tue, 02 Feb 2016 12:05:33 GMT

I would also do the Web Authentication on the 2811, not the Cisco 3560.

Thank you Philip :-)

Samrat Bose — Wed, 03 Feb 2016 03:05:02 GMT

Thank you Philip 🙂

This is exactly what I was looking for. Tons and tons of thanks to you!