kavya.punna

updated

2 years ago

KP

kavya.punna

1 Rookie

•

2 Posts

•

2 Points

0

195

July 11th, 2024 18:40

dot1x Authentication Configuration using Radius Server

Hello Everyone,

Switch Model: N2000P
Firmware: 6.6.3.17

I am trying to configure dot1x authentication using the Cloud Radius server. The configuration I am applying is as below but the switch is not even sending request to the radius(Public IP).

Configuration:


1. Enter global configuration mode and define the RADIUS server.
console#configure
console(config)#radius-server host 10.10.10.10
console(config-auth-radius)#name BigRadius
console(config-auth-radius)#primary
console(config-auth-radius)#usage 802.1x
console(config-auth-radius)#exit

console(config)#radius-server key thatsyoursecret-keepitkeepit

3 Enable authentication and globally enable 802.1x client authentication via   RADIUS:
console(config)#authentication enable
console(config)#aaa authentication dot1x default radius
console(config)#dot1x system-auth-control

4. Interface level 802.1x
console(config)#interface te1/0/4
console(config-if-Te1/0/4)#authentication port-control auto
console(config-if-Te1/0/4)#dot1x reauthentication
console(config-if-Te1/0/4)#dot1x timeout tx-period 5
console(config-if-Te1/0/4)#exit

Can anyone help me with some suggestions for the better configuration to be successful in it.

Thanks,

Kavya Sri

(edited)

  • DELL-Joey C

    Moderator

    •

    4170 Posts

    •

    20965 Points

    0

    0

    Posted July 12th, 2024 03:04

    Hi,

     

    I spoke to one of the network expert and he mentioned that you might be missing some configuration. 

     

    On global client authentication (3):

    after

    Console(config)#dot1x system-auth-control
    Console(config)#radius server source-ip X.X.X.X
    Console(config)#radius server auth X.X.X.X

     

    On interface Te1/0/4 (4)

    interface Te1/0/4
    dot1x reauthentication
    dot1x timeout guest-vlan-period 10
    dot1x max-req 10
    dot1x guest-vlan X
    dot1x unauth-vlan X
    authentication order dot1x
    authentication priority dot1x
    exit

     

    If this doesn't work, you may need to run a show tech to have us check the full logs. 

    DELL-Joey C

    Social Media and Communities Professional

    Dell Technologies | Enterprise Support Services

    #IWork4Dell

    Did I answer your query? Please click on ‘Mark as Accepted Answer’ if I did.