Brocade FastIron Ethernet Switch Security Configuration Gu Manual de usuario descargar pdf (Pagina 181)

‐ Dynamic VLAN assignment for 802.1X port configuration on page 184 (optional)

‐ Dynamically applying IP ACLs and MAC address filtersto 802.1X ports on page 187

2. Configure the device role as the Authenticator:

• ‐ Enabling 802.1X port security on page 191

‐ Initializing 802.1X on a port on page 195 (optional)

3. Configure the device interaction with Clients:

• ‐ Configuring periodic re-authentication on page 192 (optional)

‐ Re-authenticating a port manually on page 192 (optional)

‐ Setting the quiet period on page 193 (optional)

‐ Setting the wait interval for EAP frame retransmissions on page 193 (optional)

‐ Setting the maximum number of EAP frame retransmissions on page 193 (optional)

‐ Specifying a timeout for retransmission of messages to the authentication server on page

195 (optional)

‐ Allowing access to multiple hosts on page 195 (optional)

‐ MAC address filters for EAP frames on page 198 (optional)

Configuring an authentication method list for 802.1X

To use 802.1X port security, you must specify an authentication method to be used to authenticate

Clients. Brocade supports RADIUS authentication with 802.1X port security. To use RADIUS

authentication with 802.1X port security, you create an authentication method list for 802.1X and specify

RADIUS as an authentication method, then configure communication between the Brocade device and

RADIUS server.

Brocade(config)#aaa authentication dot1x default radius

Syntax: [no] aaa authentication dot1x default method-list

For the method-list , enter at least one of the following authentication methods

radius - Use the list of all RADIUS servers that support 802.1X for authentication.

none - Use no authentication. The Client is automatically authenticated by other means, without the

device using information supplied by the Client.

NOTE

If you specify both radius and none , make sure radius comes before none in the method list.

Setting RADIUS parameters

To use a RADIUS server to authenticate access to a Brocade device, you must identify the server to the

Brocade device.

device(config)#radius-server host 10.157.22.99 auth-port 1812 acct-port 1813

default key mirabeau dot1x

Syntax: radius-server { hostip-addr | ipv6-addr | server-name } [ auth-port num | acct-port num |

default ] [ key {0 | 2 } string ] [ dot1x ]

The host ip-addr , ipv6-addr or server-name parameters are either an IP address or an ASCII text string.

Configuring an authentication method list for 802.1X

FastIron Ethernet Switch Security Configuration Guide 181

53-1003088-03

1 2 ... 176 177 178 179 180 181 182 183 184 185 186 ... 395 396

Sin comentarios

Brocade FastIron Ethernet Switch Security Configuration Gu Manual de usuario Pagina 181