RE: Dot1x and aaa-model relation

From: anthony.sequeira@thomson.com
Date: Tue Sep 25 2007 - 14:52:16 ART


http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/relea
se/12.2_25_see/configuration/guide/sw8021x.html

Configuring IEEE 802.1x Authentication

"Beginning in privileged EXEC mode, follow these steps to configure IEEE
802.1x port-based authentication. This procedure is required.

Step 1 - configure terminal - Enter global configuration mode

Step 2 - aaa new-model - Enable AAA

________________________________

From: lalit gupta [mailto:lalit.tech@gmail.com]
Sent: Tuesday, September 25, 2007 1:36 PM
To: Sequeira, Anthony (NETg)
Cc: ccielab@groupstudy.com
Subject: Re: Dot1x and aaa-model relation

HI Anthony,

thanks for your inputs, Just to repeat your words so can i conclude that
there is no point in configuring dot1x without aaa.
Can u redirect me to some document which says that without aaa it is of
no use configuring dot1x . (If u have )

Rgrds
lalit

On 9/25/07, anthony.sequeira@thomson.com < anthony.sequeira@thomson.com
<mailto:anthony.sequeira@thomson.com> > wrote:

Yes - Catalyst switches can do port-based authentication, and this
feature relies upon the use of AAA. In order to have AAA on the Catalyst
switch, you must first use the aaa new-model command.

Anthony J Sequeira
#15626
Check Out the CCIE Written QoD
http://www.netmasterclass.net/CCIE/Self-Paced-Program/Written

-----Original Message-----
From: nobody@groupstudy.com [mailto: nobody@groupstudy.com
<mailto:nobody@groupstudy.com> ] On Behalf Of
lalit gupta
Sent: Tuesday, September 25, 2007 12:36 PM
To: Cisco certification
Subject: Dot1x and aaa-model relation

Hi Experts,

i m bit confused about the authentication of dot1x. Is there any meaning

configuring DOT1x without aaa new-model. I think authentication will not
happen if we dont confgure aaa with dot1x. But i m not sure about it.
Even i
m not able to search any document about their combination which says yes

or
no for AAA with dot1x. Can somebody help me to understanding this
concept.

Do i always require aaa when i configure dot1x ?

thanks and regards
lalit



This archive was generated by hypermail 2.1.4 : Sat Oct 06 2007 - 12:01:16 ART