topic Re: Configuring a 2960 for TACACS auth for SSH and radius for dot1x + in Network Security

Configuring a 2960 for TACACS auth for SSH and radius for dot1x + MAB

kyle311 — Thu, 28 Mar 2024 20:37:47 GMT

Can anyone help me out with this. I've got Switches setup in ISE to use TACACS to authenticate the logins. I'm looking to setup DOT1X on the ports, along with MAB. I have the config in ISE set but i'm trying to determine exactly how to setup the swithes base raidius piece along with the switchports, without messing up TACACS. Am i overthinking this?

Re: Configuring a 2960 for TACACS auth for SSH and radius for dot1x +

kyle311 — Thu, 28 Mar 2024 20:46:21 GMT

is it just:

radius-server host (ip addresse) key (key)

and then"

int gix/y/z

switchport mode access

switchport access vlan x

authentication port-control auto

dot1x pae authenticator

dot1x timeout tx-period 10

dot1x timeout uppp-timeout 10

Re: Configuring a 2960 for TACACS auth for SSH and radius for dot1x +

nict — Thu, 28 Mar 2024 22:07:35 GMT

Hi @kyle311

I think you might benefit from looking into this article: 802.1X Switch Configuration Summarized

Re: Configuring a 2960 for TACACS auth for SSH and radius for dot1x +

kyle311 — Fri, 29 Mar 2024 13:05:34 GMT

Thank you much that was EXACTLY what I needed!