cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
533
Views
0
Helpful
1
Replies

802.1x

i have configure aaa 802.1x authentication  i need to configure if my radius server is unavailable then  users authenticate via Local login its workig fine for telnet and console but i need to configure it interface port let follwing is my configuration also if authentication failed move the users into guest vlan

switchport access vlan 13
switchport mode access
dot1x pae authenticator
dot1x port-control auto
dot1x guest-vlan 12
end

Thanks

1 Reply 1

Tarik Admani
VIP Alumni
VIP Alumni

Faizan,

I wanted to know what version of IOS and platform that you are trying to comfigure dot1x for? As far as device administration goes, using telnet or ssh will allow you access to the device since that is the design of authentication to the device itself. As far as network access goes there is no local failover feature avaialble. There is a critical vlan feature that you can use in case the radius servers were to go down, and in this case the user will be assign to that specific vlan, you then can enable authentication once the radius servers come back online.

Let me know version of ios and platform you are running and i can send the commands along.

Thanks,

Tarik Admani