Home > AAAdot1x Lab Sim

AAAdot1x Lab Sim

March 3rd, 2017 in Lab Sim, LabSim Go to comments

Question

Answer and Explanation

 

1) Configure ASW1

Enable AAA on the switch:
ASW1(config)#
aaa new-model

The new-model keyword refers to the use of method lists, by which authentication methods and sources can be grouped or organized.

Define the server along with its secret shared password:
ASW1(config)#radius-server host 172.120.39.46 key rad123

ASW1(config)#aaa authentication dot1x default group radius
This command causes the RADIUS server defined on the switch to be used for 802.1x authentication.

Globally enable port-based authentication (802.1x) on a switch:
ASW1(config)#dot1x system-auth-control

Configure Fa0/1 to use 802.1x:

ASW1(config)#interface fastEthernet 0/1
ASW1(config-if)#dot1x port-control auto
Notice that the word “auto” will force connected PC to authenticate through the 802.1x exchange.

2) Configure DSW1:

Define an access-list:
DSW1(config)#ip access-list standard 10 (syntax: ip access-list {standard | extended} acl-name)
DSW1(config-std-nacl)#permit 172.120.40.0 0.0.0.255
DSW1(config-std-nacl)#exit

Define an access-map which uses the access-list above:
DSW1(config)#vlan access-map MYACCMAP 10 (syntax: vlan access-map map_name [0-65535] )
DSW1(config-access-map)#match ip address 10 (syntax: match ip address {acl_number | acl_name})
DSW1(config-access-map)#action forward
DSW1(config-access-map)#exit

DSW1(config)#vlan access-map MYACCMAP 20
DSW1(config-access-map)#action drop (drop other networks)
DSW1(config-access-map)#exit

Apply a vlan-map into a vlan:
DSW1(config)#vlan filter MYACCMAP vlan-list 20 (syntax: vlan filter mapname vlan-list list)

DSW1#copy running-config startup-config

(Notice: Many reports said the copy running-config startup-config didn’t work but they still got the full mark)

Note: If the requirement of this sim states that “not to use named ACLs” then you should configure number ACL instead:

DSW1(config)#access-list 10 permit 172.120.40.0 0.0.0.255

Other lab-sims in this site:

LACP with STP Sim
MLS and EIGRP Sim
VTP Lab 2
VTP Lab
Spanning Tree Lab Sim

Comments
Comment pages
1 39 40 41 41
  1. om
    November 9th, 2017

    hi,where can i get lab for vtpv3 and aadot1x

  2. Forgotsomethingdidwe
    November 11th, 2017

    You should really make sure Fa0/1 is configured correctly. Perform a sh run int fa0/1

    for are going to need to do the following:

    conf t
    int fa0/1
    switchport mode access
    switchport access vlan 20
    dot1x port-control auto
    no shut
    end
    copy run start

    Then move on to DSW1

  3. Ron
    November 13th, 2017

    Has anyone actualy seen this sim on the test? The blueprint for 300-115 doesn’t even list dot1x.

  4. Anonymous
    November 14th, 2017

    not to use named ACLs
    DSW1(config)#access-list 10 permit 172.120.40.0 0.0.0.255
    DSW1(config)#int vlan 20
    DSW1(config-if)#ip access-group 10 in
    DSW1# copy running-config startup-config

  5. san2427
    November 14th, 2017

    Please share CCNP switching dump email id: san242721 @ gmail dot com

  6. Anonymous
    November 15th, 2017

    Please share CCNP switching dump email id:{email not allowed}

  7. Anonymous
    November 15th, 2017

    Please share CCNP switching dump email id:aaa692004@gmail dot com

  8. ema
    November 15th, 2017

    please I need latest CCNP Switching Dump, I have an exam next weak. email id: {email not allowed}

  9. ema
    November 15th, 2017

    please I need latest CCNP Switching Dump, I have an exam next weak. email id: abdelmonaim emara93@gmail com

Comment pages
1 39 40 41 41
  1. No trackbacks yet.