Dot1x, Guest VLAN

Max1964

Hi,

I got 10 switches C2560 and one core switch 3750G, i want to implement dot1x port authentication.
I want the authentication validated with EAP/Radius ( Windows2003).
Question:
Do i have to to implement dot1x on all C2560 switches?
Do i configute alle port switch (FI0/1 - 24) with dot1x?
How do i have to create and configure the VLAN Employe and VLAN Guest?
How to tell VLAN Guest "Use only internet)?
Do i need to configure the Core switch too?
Do i need anny kind of routing?

Please Help steps to follow!!!
Kind regards and thanks

mikej412

You can find the dot1x information (and sample configurations) in the Cisco docs.

Where and how to configure depends on your network and your requirements. If you don't need dot1x on your core, then you don't have to configure it there. If you want your guest VLAN to have only internet access, then you have to configure your network to only give that guest VLAN access to the internet.

Catalyst 2960 Switch Software Configuration Guide, 12.2(25)SED - Configuring IEEE 802.1x Port-Based Authentication [Cisco Catalyst 2960 Series Switches] - Cisco Systems

Catalyst 3750 Switch Software Configuration Guide, 12.2(25)SEE - Configuring IEEE 802.1x Port-Based Authentication [Cisco Catalyst 3750 Series Switches] - Cisco Systems