topic Re: 802.1x in Network Security

802.1x

nettuno8_20111 — Fri, 15 Mar 2024 18:30:06 GMT

Hi, I activated 801.1X on the 2960 Catalist switch but the hosts are unable to authenticate on the switch. I get logs regarding the authentication failure. can anyone help me? Thank you.

Re: 802.1x

balaji.bandi — Fri, 15 Mar 2024 18:41:43 GMT

what ISE Version, what Switch IOS code running ? what configuration you applied on the switch ?

what you see on ISE Live Logs ?

You need to troubleshoot and understand the setup :

https://community.cisco.com/t5/security-knowledge-base/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515

Re: 802.1x

MHM Cisco World — Sat, 16 Mar 2024 16:57:47 GMT

debug radius
debug access-session all
debug dot1x all

Share output of above

MHM

Re: 802.1x

nettuno8_20111 — Tue, 19 Mar 2024 18:56:02 GMT

Hi, I don't have a radius server, the user must authenticate on the switch

Re: 802.1x

MHM Cisco World — Tue, 19 Mar 2024 19:03:07 GMT

You can not use local user in sw for 802.1x you need aaa server. It mandatory

MHM

Re: 802.1x

balaji.bandi — Tue, 19 Mar 2024 19:17:14 GMT

802.1x deployment means identity - who you are, what to access .

So Local user not feasible, look for different methods to protect the ports.

Another note - what is the use case here