
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
!
!
!
aaa new-model
!
!
aaa authentication dot1x default group radius
aaa accounting dot1x default start-stop group radius
aaa accounting dot1x system start-stop group radius
!
!
!
aaa session-id common
system mtu routing 1500
authentication mac-move permit
mab request format attribute 32 vlan access-vlan
ip subnet-zero
!
ip dhcp pool dpool1
   network 10.0.0.0 255.255.255.0
!
!
!
!
crypto pki trustpoint TP-self-signed-2405477248
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2405477248
 revocation-check none
 rsakeypair TP-self-signed-2405477248
!
!
crypto pki certificate chain TP-self-signed-2405477248
 certificate self-signed 01 nvram:IOS-Self-Sig#3838.cer
dot1x system-auth-control
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface GigabitEthernet0/1
 switchport mode access
 authentication order mab webauth
 dot1x pae authenticator
!
interface GigabitEthernet0/2
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
 switchport mode access
 authentication order mab webauth
 authentication port-control auto
 dot1x pae authenticator
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
!
interface GigabitEthernet0/17
!
interface GigabitEthernet0/18
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
!
interface GigabitEthernet0/24
!
interface GigabitEthernet0/25
!
interface GigabitEthernet0/26
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface Vlan1
 ip address 10.0.0.1 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
ip radius source-interface Vlan1 
ip sla enable reaction-alerts
!
radius-server host 10.0.0.90 auth-port 1812 acct-port 1813 key pass
radius-server retransmit 15
radius-server vsa send authentication
!
!
line con 0
 logging synchronous
line vty 5 15
!
end
