Configuring Port and System Security 503Configuring Internal Authentication Server UsersBeginning in Privileged EXEC mode, use the following commands to addusers to the IAS database and to use the database for 802.1X authentication.IEEE 802.1X Configuration ExamplesThis section contains the following examples:• Configuring 802.1X Authentication• Controlling Authentication-Based VLAN Assignment• Allowing Dynamic VLAN Creation of RADIUS-Assigned VLANs• Configuring Authentication Server DiffServ Filter AssignmentsConfiguring 802.1X AuthenticationThe network in this example requires clients to use 802.1X authentication toaccess the network through the switch ports. The administrator mustconfigure the following settings on systems other than the switch beforeconfiguring the switch:1 Add the users to the client database on the Authentication Server, such asa RADIUS server with Cisco ® Secure Access Control Server (ACS)software.2 Configure the settings on the client, such a PC running Microsoft ®Windows, to require 802.1X authentication.Command Purposeconfigure Enter Global Configuration mode.aaa ias-user usernameuserAdd a user to the IAS user database. This command alsochanges the mode to the AAA User Config mode.passwordpassword[encrypted]Configure the password associated with the user.CTRL + Z Exit to Privileged EXEC mode.show aaa ias-users View all configured IAS users.clear aaa ias-users Delete all IAS users from the database.
