1-19To do… Use the command… RemarksClear 802.1X statistics reset dot1x statistics[ interface interface-list ] Available in user view802.1X Configuration ExampleNetwork requirementsz The access control method of macbased is required on the port GigabitEthernet 1/0/1 to controlclients.z All clients belong to default domain aabbcc.net, which can accommodate up to 30 users. RADIUSauthentication is performed at first, and then local authentication when no response from theRADIUS server is received. If the RADIUS accounting fails, the device gets users offline.z A server group with two RADIUS servers is connected to the device. The IP addresses of theservers are 10.1.1.1 and 10.1.1.2 respectively. Use the former as the primaryauthentication/secondary accounting server, and the latter as the secondaryauthentication/primary accounting server.z Set the shared key for the device to exchange packets with the authentication server as name, andthat for the device to exchange packets with the accounting server as money.z Specify the device to try up to five times at an interval of 5 seconds in transmitting a packet to theRADIUS server until it receives a response from the server, and to send real time accountingpackets to the accounting server every 15 minutes.z Specify the device to remove the domain name from the username before passing the username tothe RADIUS server.z Set the username of the 802.1X user as localuser and the password as localpass and specify touse clear text mode. Enable the idle cut function to get the user offline whenever the user remainsidle for over 20 minutes.Figure 1-10 Network diagram for 802.1X configurationConfiguration procedure
