[switch 3750] 802.1X

[mew2king521]

Hello,
I'm beginner on cisco, and i want configure a RADIUS in order to do dynamic vlans. My problem is : When i follow the procedure on cisco web site 

(http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2950/software/release/12-1_9_ea1/configuration/guide/scg/Sw8021x.html)

I'm blocked when I have to enter command "dot1x port-control auto" i haven't got that command.

I searched on internet a solution. 

Here is my procedure : 

configure terminal

aaa new-model

aaa authentication dot1x default group radius

interface {l'interface}

switchport mode access 

dot1x port-control auto (but that command don't work)

dot1x pae authenticator (i had that, this is a command replacement ?)

end

show dot1x

Have you a solution for me ?

Thank

Regards

[Karsten Iwen · Accepted solution]

For assigning VLANs, you also have to configure authorization:

aaa authorization network default group radius

And you need to enable dot1x:

dot1x system-auth-control

Both commands are in global configuration

[mew2king521]

Thank for your answer, 

I'll try that.

conf t = global configuration ?

Regards :)

[mew2king521]

Indeed, That work, 

here my procedure :

projet(config)#aaa new-model
projet(config)#aaa authentication dot1x default group radius
projet(config)#dot1x system-auth-control
projet(config)#aaa authorization network default group radius
projet(config)#radius-server host 192.168.60.1
projet(config)#radius-server key test1234
projet(config)#interface fastethernet1/0/13
projet(config-if)#switchport mode access
projet(config-if)#dot1x pae (auto-completion give that)
projet(config-if)#dot1x pae (auto-completion give that)
projet(config-if)#dot1x pae (auto-completion give that)
projet(config-if)#dot1x port-control auto (auto-completion doesn't work, I had wrote that command manually)
projet(config-if)#end
projet#show dot1x

Sysauthcontrol              Enabled
Dot1x Protocol Version            3

802.1x is activate ?

(Sorry I don't understand Sysauthcontrol)

Regards

[Karsten Iwen]

> projet(config-if)#dot1x port-control auto (auto-completion doesn't work, I had wrote that command manually)
 

If you have IOS >= 12.2.50, the command changed to

authentication port-control auto

Take a look at the Cisco IOS Quick Reference Guide for IBNS, it's probably the best Guide for .1x.

[mew2king521]

Indeed thank's for the help

[mew2king521]

Indeed, That work, 

here my procedure :

projet(config)#aaa new-model
projet(config)#aaa authentication dot1x default group radius
projet(config)#dot1x system-auth-control
projet(config)#aaa authorization network default group radius
projet(config)#radius-server host 192.168.60.1
projet(config)#radius-server key test1234
projet(config)#interface fastethernet1/0/13
projet(config-if)#switchport mode access
projet(config-if)#dot1x pae (auto-completion give that)
projet(config-if)#dot1x pae (auto-completion give that)
projet(config-if)#dot1x pae (auto-completion give that)
projet(config-if)#dot1x port-control auto (auto-completion doesn't work, I had wrote that command manually)
projet(config-if)#end
projet#show dot1x

Sysauthcontrol              Enabled
Dot1x Protocol Version            3

802.1x is activate ?

(Sorry I don't understand Sysauthcontrol)

Regards

[mew2king521]

message deleted