Cisco TrustSec Overview Configuring Cisco TrustSec Credentials Command or Action Purpose • The cts-id argument has a maximum length of 32 characters and is case sensitive. • The password argument is the password for this device to use when authenticating with other Cisco TrustSec devices with EAP-FAST. Step 3 configure terminal Example: Device(config)# configure terminal Enters global configuration mode. Step 4 aaa new-model Example: Device(config)# aaa new-model Enables new RADIUS and AAA access control commands and functions and disables old commands. Step 5 aaa authentication dot1x default group radius Example:
Device(config)# aaa authentication dot1x default group radius Specifies that RADIUS servers are used for authentication on interfaces running IEEE 802.1X. Step 6 cts authorization list network list-name Example: Device(config)# cts authorization list network cts-mlist Specifies a list of AAA servers for the Cisco TrustSec seed device to use. Step 7 aaa authorization network list-name group radius Example: Device(config)# aaa authorization network cts-mlist group radius Specifies the Cisco TrustSec authorization list name for allnetwork-related service requests from RADIUS servers. Step 8 exit Example: Device(config)# exit Exits global configuration mode. Step 9 show cts server-list Example:
Device# show cts server-list Displays the RADIUS the server configurations for Cisco TrustSec seed devices. Step 10 show cts credentials Example: Device# show cts credentials Displays the Cisco TrustSec device ID. The stored password is never displayed. Cisco TrustSec Overview 8