802.1x on Cisco Catalyst 2950

Andrea Dainese

July 17, 2014

A very short post about 802.1x (dot1x) on Cisco Catalyst 2950 series. Configure RADIUS and enable dot1x on the switch:

aaa authentication dot1x default group radius
aaa accounting dot1x default start-stop group radius
dot1x system-auth-control

Then enable dot1x on all interfaces (additional security commands are added in the example below):

interface FastEthernet0/1
 switchport mode access
 switchport nonegotiate
 switchport port-security maximum 5
 switchport port-security
 switchport port-security aging time 5
 switchport port-security violation restrict
 switchport port-security aging type inactivity
 dot1x port-control auto
 dot1x timeout tx-period 2
 dot1x guest-vlan 666
 dot1x auth-fail vlan 666
 no cdp enable
 spanning-tree portfast
 spanning-tree bpduguard enable