Thursday 10 January 2013

How to configure Cisco Switch for Radius authentication ?



Setup :

                ______________________   
                 | Port1   Port2  Port3.......|
                 ------------------------------------
                    |             |
Client PC ---              ------------ FreeRadius Server


Client PC is windows XP

Free radius is on Linux Fedora core 14

 Console Commands to configure 802.1X in Cisco Switch Catalyst  2950 series:
-------------------------------------------------------------------

configure terminal
aaa new-model
aaa authentication dot1x default group radius
interface fastethernet0/1
dot1x port-control auto
end
config t
interface vlan 1
ip address 197.168.10.1 255.255.255.0
no shutdown


--------------------------------------------------------------------
Switch(config)# radius-server host 197.168.10.230 auth-port 1812 key shared-secret


The client should get authenticated with free radius server, with user name and password configured in free radius server (users file) and given on PC.