Dot1x Configuration Flashcards

1
Q
  1. ASW1 - How do you enable AAA on a switch?
A

ASW1(config)# aaa new-model

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q
  1. ASW1 - How do you define a radius server along with its secret shared password?
A

ASW1(config)# radius-server host 172.120.39.46 key rad123

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q
  1. ASW1 - How do you cause the RADIUS server defined on the switch to be used for 802.1x authentication?
A

ASW1(config)# aaa authentication dot1x default group radius

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
  1. ASW1 - How do you enable 802.1x on a switch?
A

ASW1(config)# dot1x system-auth-control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  1. ASW1 - How do you configure Fa0/1 to use 802.1x?
A

ASW1(config-if)# switchport mode access

ASW1(config-if)# dot1x port-control auto

**Notice that the word “auto” will force connected PC to authenticate through the 802.1x exchange.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q
  1. DSW1 - How do you define an access-list?
A

DSW1(config)# ip access-list standard 10 (syntax: ip access-list {standard | extended} acl-name)

DSW1(config-ext-nacl)# permit 172.120.40.0 0.0.0.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  1. DSW1 - How do you define an access-map which uses the access-list above?
A

DSW1(config)# vlan access-map MYACCMAP 10 (syntax: vlan access-map map_name [0-65535] )

DSW1(config-access-map)# match ip address 10 (syntax: match ip address {acl_number | acl_name})

DSW1(config-access-map)# action forward

DSW1(config-access-map)# exit

DSW1(config)# vlan access-map MYACCMAP 20

DSW1(config-access-map)# action drop (drop other networks)

DSW1(config-access-map)# exit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  1. DSW1 - How do you apply a vlan-map into a vlan?
A

DSW1(config)# vlan filter MYACCMAP vlan-list 20 (syntax: vlan filter mapname vlan-list list)

DSW1# copy running-config startup-config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly