Thursday, 10 January 2013

How to configure Cisco Switch for Radius authentication ?

Setup :

                 | Port1   Port2  Port3.......|
                    |             |
Client PC ---              ------------ FreeRadius Server

Client PC is windows XP

Free radius is on Linux Fedora core 14

 Console Commands to configure 802.1X in Cisco Switch Catalyst  2950 series:

configure terminal
aaa new-model
aaa authentication dot1x default group radius
interface fastethernet0/1
dot1x port-control auto
config t
interface vlan 1
ip address
no shutdown

Switch(config)# radius-server host auth-port 1812 key shared-secret

The client should get authenticated with free radius server, with user name and password configured in free radius server (users file) and given on PC.