!
ip device tracking
aaa new-model
aaa authorization network default local group radius
radius-server vsa send authentication
radius-server host 10.72.15.81 auth-port 1812 acct-port 1813 key aruba123
aaa authentication dot1x default group radius local
aaa authorization network default local group radius
aaa authorization auth-proxy default group radius
aaa accounting dot1x default start-stop group radius
dot1x system-auth-control
!
aaa server radius dynamic-author
client 10.72.15.81 server-key aruba123
port 3799
auth-type all
!
ip access-list extended CPG
deny tcp any host 10.72.15.81
permit tcp any any
!
interface GigabitEthernet1/0/12
switchport access vlan 46
switchport mode access
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 3
dot1x timeout supp-timeout 5
spanning-tree portfast
!
ip http server
ip http secure-server
!