Testing RADIUS

[scottcummins]

Good day All

I have a new 93128 that I want to test my RADIUS, But I only want to connect one port to my network, I want to keep that port from broadcasting anything because I have a config on it. But I want to see if I have the correct RADIUS config and KEY. How do I configure the port to verify it hits the radius and authenticates? If I can at all. I guess what I am asking is to configure the Port based Radius Authentication

Scott

[Josh Sprang]

Is this what you are looking for?

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_dot1x.html#wp1482267

It is for an older 7k nx-os but should be the same.  To my knowledge the default port configuration is always forced authorized meaning it does not need authentication to enable the port. 

You can always set up a test port to port-control auto and plug you PC with the correct 802.1x config to make sure it works... 

[Josh Sprang]

forgot to mention you can always do no feature dot1x and that will remove the dot1x config if your in a pinch

[scottcummins]

Josh

Thanks for your reply very much, My NEXUS is running 6.1(2)I3(1) and I was able to switchto VDC 1 and tried running the dot1x commands but they are not part of the command structure for the interface. I tried to enable the dot1x feature, But it is not in the feature menu.

Any ideas are greatly appreciated

[Josh Sprang]

Sorry to say it looks like 802.1x is not available on the 9k it is on the 7k.  If I compare the security config guide here for the 9k:

http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-installation-and-configuration-guides-list.html

and the one here for the 7k:

http://www.cisco.com/c/en/us/support/switches/nexus-7000-series-switches/products-command-reference-list.html

The 7k has dot1x and the 9k omits it.  Based on that and the fact that feature dot1x is not available then looks like it isn't supported to me.

[scottcummins]

Josh

Thanks so much again, I really appreciate it