802.1X with 2960 LAN-BASE

[Guillaume Roche]

Hi,

I have a 2960 with c2960-lanbasek9-mz.122-55.SE5.bin .

I want to configure 802.1X for authentication of computers but i have no command authentication or dot1x in interface ...

Someone have an idea ?

Thanks,

Best regards,

Guillaume

[Reza Sharifi]

Hi,

Did you enable AAA first?

HTH

[Guillaume Roche]

Yes of course ...

here my configuration :

aaa group server radius RadiusServers
 server x.x.x.x auth-port 1812 acct-port 1813
!
aaa authentication login default group RadiusServers local
aaa authentication dot1x default group RadiusServers local
aaa authorization exec default group RadiusServers local
aaa authorization network default group RadiusServers local
aaa accounting dot1x default start-stop group RadiusServers
aaa accounting exec default start-stop group RadiusServers
aaa accounting system default start-stop group RadiusServers
!
dot1x system-auth-control
!
radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 7 xxxxxx

Thanks,

[Reza Sharifi]

So, are you missing the "dot1x port-control" command under the interface?

[Guillaume Roche]

It's the problem ... i have no command dot1x port-control under the interface ...

You can see :

SW-xxx-USER1(config-if)#?  
Interface configuration commands:
  arp                     Set arp type (arpa, probe, snap) or timeout
  auto                    Configure Automation
  bandwidth               Set bandwidth informational parameter
  carrier-delay           Specify delay for interface transitions
  cdp                     CDP interface subcommands
  channel-group           Etherchannel/port bundling configuration
  channel-protocol        Select the channel protocol (LACP, PAgP)
  dampening               Enable event dampening
  default                 Set a command to its defaults
  delay                   Specify interface throughput delay
  description             Interface specific description
  down-when-looped        Force looped interface down
  duplex                  Configure duplex operation.
  exit                    Exit from interface configuration mode
  flowcontrol             Configure flow operation.
  help                    Description of the interactive help system
  hold-queue              Set hold queue depth
  ip                      Interface Internet Protocol config commands
  keepalive               Enable keepalive
  lacp                    LACP interface subcommands
  link                    Configure Link
  lldp                    LLDP interface subcommands
  load-interval           Specify interval for load calculation for an interface
  location                Interface location information
  logging                 Configure logging for interface
  mac                     MAC interface commands
  macro                   Command macro
  max-reserved-bandwidth  Maximum Reservable Bandwidth on an Interface
  mdix                    Set Media Dependent Interface with Crossover
  mls                     mls interface commands
  mvr                     MVR per port configuration
  neighbor                interface neighbor configuration mode commands
  network-policy          Network Policy
  nmsp                    NMSP interface configuration
  no                      Negate a command or set its defaults
  pagp                    PAgP interface subcommands
  power                   Power configuration
  priority-queue          Priority Queue
  queue-set               Choose a queue set for this queue
  rmon                    Configure Remote Monitoring on an interface
  service-policy          Configure QoS Service Policy
  shutdown                Shutdown the selected interface
  small-frame             Set rate limit parameters for small frame
  snmp                    Modify SNMP interface parameters
  source                  Get config from another source
  spanning-tree           Spanning Tree Subsystem
  speed                   Configure speed operation.
  srr-queue               Configure shaped round-robin transmit queues
  storm-control           storm configuration
  switchport              Set switching mode characteristics
  timeout                 Define timeout values for this interface
  transmit-interface      Assign a transmit interface to a receive-only interface
  tx-ring-limit           Configure PA level transmit ring limit
  udld                    Configure UDLD enabled or disabled and ignore global UDLD setting
  vtp                     Enable VTP on this interface

[Reza Sharifi]

Is this a switchport or a routed port?

can you post the output of "sh run int x/x"

[Guillaume Roche]

Yes, this is a switchport .

There is the sh run int :

interface FastEthernet0/24
 switchport access vlan 10
 switchport voice vlan 99
 spanning-tree portfast
end

[Guillaume Roche]

Noone knows ?

[Reza Sharifi]

Can you try typing the command and see if it takes it?

dot1x port-control auto

[Guillaume Roche]

This command doesn't exist on my switch !

SW-xxx-USER1(config-if)#dot1x?
% Unrecognized command

[Reza Sharifi]

I understand that.  What I am saying is to try to type the letters.

Some commands are hidden and in order for it to work you just have to type the entire command.

[Guillaume Roche]

SW-xxx-USER1(config-if)#dot1x port-control auto
                          ^
% Invalid input detected at '^' marker.

SW-xxx-USER1(config-if)#authentication port-control auto
                           ^
% Invalid input detected at '^' marker.

[Reza Sharifi]

ok so, that does not work.  No sure, maybe loading a different version of IOS can help.

[Guillaume Roche]

I already tried another IOS i used now 15.0(2)SE8  C2960-LANBASEK9-M ...but same problem ...

[Andrew Khalil]

Hey, 

The commands are not exiting because you should type first:

#int f0/1

#switchport mode access

then you will fine:

in the old versions: dot1x port-control ....

int the new versions: authentecation port-control ....

Please try it, it will work! 

Thanks in advance.