BigIron RX Series Configuration Guide 95553-1001986-01Configuring 802.1x port security 33Configuring an authentication method list for 802.1xTo use 802.1x port security, you must specify an authentication method to be used to authenticateClients. Brocade supports RADIUS authentication with 802.1x port security. To use RADIUSauthentication with 802.1x port security, you create an authentication method list for 802.1x andspecify RADIUS as an authentication method, then configure communication between the BigIronRX and RADIUS server.For example.BigIron RX(config)# aaa authentication dot1x default radiusSyntax: [no]aaa authentication dot1x default For the , enter at least one of the following authentication methods.radius – Use the list of all RADIUS servers that support 802.1x for authentication.none – Use no authentication. The Client is automatically authenticated without the device usinginformation supplied by the Client.NOTEIf you specify both radius and none, make sure radius comes before none in the method list.Setting RADIUS parametersTo use a RADIUS server to authenticate access to a BigIron RX, you must identify the server to theBigIron RX. For example.BigIron RX(config)# radius-server host 209.157.22.99 auth-port 1812 acct-port1813 default key mirabeau dot1xSyntax: radius-server host | [auth-port acct-port [authentication-only | accounting-only | default [key 0 | 1 [dot1x]]] ]The host | parameter is either an IP address or an ASCII text string.The auth-port parameter specifies what port to use for RADIUS authentication.The acct-port parameter specifies what port to use for RADIUS accounting.The dot1x parameter indicates that this RADIUS server supports the 802.1x standard. A RADIUSserver that supports the 802.1x standard can also be used to authenticate non-802.1xauthentication requests.NOTETo implement 802.1x port security, at least one of the RADIUS servers identified to the BigIron RXmust support the 802.1x standard.Supported RADIUS attributesMany IEEE 802.1x Authenticators will function as RADIUS clients. Some of the RADIUS attributesmay be received as part of IEEE 802.1x authentication. The BigIron RX supports the followingRADIUS attributes for IEEE 802.1x authentication:• Username (1) – RFC 2865• FilterId (11) – RFC 2865• Vendor-Specific Attributes (26) – RFC 2865
