[c-nsp] authentication host-mode multi-auth configuration on cisco 2960
pamela pomary
ppomary at gmail.com
Fri Jul 15 10:51:20 EDT 2011
Thanks Lan for the response.
I have set authentication host-mode multi-domain . This time, IP
Phone authenticates but the PC on the other hand does not prompt me for
username and password at all. Here is my configuration on the fastEthernet
port
interface FastEthernet0/10
switchport access vlan 6
switchport mode access
switchport voice vlan 200
authentication host-mode multi-domain
authentication port-control auto
authentication violation protect
mab eap
dot1x pae both
spanning-tree portfast
end
Also, there no logs generated on the cisco 2960 switch and radius server
when runned in debug mode
On Thu, Jul 14, 2011 at 8:55 PM, Ian Henderson <ianh at ianh.net.au> wrote:
> On 15/07/2011, at 3:05 AM, pamela pomary wrote:
>
> > I want to be able to authenticate the IP Phone via MAC address by-pass
> and
> > authenticate the PC that connects to the LAN port of the IP Phone via
> dot1x
> > using authentication host-mode multi-auth. How can I achieve that.
>
> Use 'host-mode multi-domain' for a phone plus PC. 'multi-auth' is for using
> a dumb switch (multiple devices, only one of which will be authenticated to
> open the entire port).
>
>
>
More information about the cisco-nsp
mailing list