Dot1x, AAA notes

dot1x
– dot1x can work with DHCP address assignment
– only EAPOL is allowed before a port is authorized
– Vlan Assignment (by a RADIUS server) depends on the result of dot1x authentication
– RADIUS server- the dot1x authentication server- is the one which verifies the identity of the client connected to a dot1x port

AAA
– there are named method lists (simply method lists)
– once AAA is enabled, the default method list is applied to console, VTY access, enable mode…

Comments

Post a Comment

Popular posts from this blog

Call Forward And Call Hunt on CUCM

Image
Call forwarding is one of the features of the call coverage in Cisco CUCM. Call Hunting is when CUCM distributes a call on more than one Directory Number (DN), whether consecutively or simultaneously, depending on the algorithm. Hunt Pilot A Hunt Pilot is the entry point for the whole call hunting process. It is hit by a Call. The Hunt Pilot number is a dialable entity and has many similarities with Route Patterns : We can configure Route Filters with Hunt Pilots, Hunt Pilots can Provide Outside Dial Tone , We can set Hunt Pilots with the Urgent Priority flag, They can route or block calls, They can apply Calling and Called Party Transformations. Hunt Lists After hitting the Hunt Pilot, the call is presented by CUCM to the Hunt List. Each Hunt List contains one or more ordered Line Groups. A Hunt List can be pointed by one or more Hunt Pilots. Line Groups Each Line Group contains one or more member (we’ll refer to them as Hunt members, hunt parties or Line Group members). A Line Grou...
Read more

Show Voice DSP Commands On Cisco IOS Gateways

Image
This article is a series of IOS commands that deal with DSPs and PVDMs. To determine the type of PVDM in your router:  show inventory Our router is using PVDM3-64. “show voice dsp”, “show voice dsp active” and “show voice dsp voice” “show voice dsp voice” For example, if you have a PVDM3-64 voice card, and you do a “show voice dsp voice”, you’ll get 64 lines, which correspond to 64 DSP voice channels. That’s the maximum allowed with this type of cards. Here is the output of the “show voice dsp voice” command, on a voice gateway: You notice that some channels are “busy” while other are “idle”. We’ve got 64 entries, so all channels of this DSP are used in voice termination. “show voice dsp” and “show voice dsp active” What if we want to see only active DSP voice channels? We can get that information with the command “show voice dsp” or ...
Read more

IOS Commands To Verify Voice Ports

Image
show voice port “show voice port” displays verbose information about all the voice ports on a voice gateway. Let’s examine “show voice port” on a E1 PRI gateway: On this gateway, we have two E1 PRI trunks, thus two voice ports. Each voice port is in the form “slot/subunit/port:signaling channel”. In the table that comes after each displayed voice port, we have 31 lines. These are the available channels on each PRI link. Notice that the column “CH” refers to timeslot, and not the channel. The 16th timeslot carries the 15th channel, which is the signaling channel (D channel). show voice port summary This command lists the voice ports and their timeslots combined into one table.  
Read more