configurar un puerto con Authentication failure in 802.1x port-based,

[telcostcs]

Buenos dias,

Agradezco me puedan indicar como configurar un puerto con Authentication failure in 802.1x port-based, para los modelos 2960x,9300,9200, esto debido a que se necesita que el NAC que actualmente se tiene implementado en la compañía, autentique no por mac, si no por certificado.

Actualmente la configuración que se tiene es la siguiente

interface GigabitEthernet1/0/10

 switchport access vlan 306

 switchport mode access

 switchport voice vlan 32

 shutdown

 authentication event fail action authorize vlan 1

 authentication event server dead action authorize vlan 1

 authentication event server dead action authorize voice

 authentication host-mode multi-domain

 authentication order mab dot1x

 authentication port-control auto

 authentication violation protect

 mab

 auto qos trust dscp

 spanning-tree portfast

 spanning-tree bpduguard enable

 spanning-tree guard root

[balaji.bandi]

if you can tell me how to configure a port with Authentication failure in 802.1x port-based

it was not clear what you looking - need more explanation of the request.

check below ISE wired deployment with 802.1X

https://community.cisco.com/t5/security-knowledge-base/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515