Configuration NAS

Cisco >= 12.2.50

Global configuration

aaa group server radius RadiusServers
server x.x.x.x auth-port 1812 acct-port 1813
!
aaa authentication login default group RadiusServers local
aaa authentication dot1x default group RadiusServers local
aaa authorization exec default group RadiusServers local
aaa authorization network default group RadiusServers local
aaa accounting dot1x default start-stop group RadiusServers
aaa accounting exec default start-stop group RadiusServers
aaa accounting system default start-stop group RadiusServers
!
dot1x system-auth-control
!
logging x.x.x.x
snmp-server community private RW
snmp-server enable traps snmp coldstart
snmp-server enable traps config
snmp-server host x.x.x.x version 2c private
radius-server host x.x.x.x auth-port 1812 acct-port 1813 key 0 secret
snmp-server trap-source Vlan 1

Port configuration with Cisco Phone

switchport mode access
switchport voice vlan 222
authentication host-mode multi-domain
authentication port-control auto
dot1x pae authenticator
dot1x max-reauth-req 10


Configuration fonctionnant avec Authentification MAC derrière un tel non authentifié

interface FastEthernet0/10
description TEL-Jerem-A15
switchport mode access
switchport voice vlan 222
authentication order mab
authentication port-control auto
authentication violation replace
mab
dot1x pae authenticator
spanning-tree portfast
end


Configuration fonctionne avec Authentification MAC derrière un tel authentifié en 802.1X.

interface FastEthernet0/10
description TEL-Jerem-A15
switchport mode access
switchport voice vlan 222
authentication host-mode multi-domain
authentication order dot1x mab
authentication port-control auto
authentication violation replace
mab
dot1x pae authenticator
spanning-tree portfast
end