11-29-2007 05:03 PM - edited 03-05-2019 07:43 PM
Whats the purpose of configuring dot1x globally but not configuing it on any interface? Does that have a purpose?
Could this be a config that someone abandoned at some point?
aaa authentication dot1x default group radius none
radius-server host 10.163.53.40 auth-port 1812 acct-port 1813
radius-server host 10.163.53.39 auth-port 1812 acct-port 1813
radius-server host 10.161.67.15 auth-port 1812 acct-port 1813
radius-server host 10.160.17.25 auth-port 1812 acct-port 1813
radius-server source-ports 1645-1646
radius-server key 7 <removed>
dot1x system-auth-control
Thanks
11-29-2007 05:49 PM
Assuming this configuration is on a switch, Dot1x is disabled by default on each interface (dot1x port-control force-authorized) so enabling dot1x globally without setting "dot1x port-control auto" effectively does nothing. Maybe someone configured it for a proof of concept on a couple of ports but never went forward with a deployment. It can be a royal pain to support.
11-29-2007 05:56 PM
I agree with your assessment....I wanted a second pair of eyes looking at it...
Thanks
Victor
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide