Cisco APIC Security Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Security Configuration Guide, Release 6.2(x)

Configure 802.1X node authentication using the NX-OS-style CLI

Updated: April 17, 2026

Want to summarize with AI?

Log in

Configures 802.1X node authentication by creating a RADIUS group, port authentication policy, policy group, and leaf switch profile using the NX-OS-style CLI.

Procedure

  1. Configure the RADIUS authentication group:

    Example:

    apic1# configure
                        apic1(config)# aaa group server radius myradiusgrp
                        apic1(config-radius)# server 192.168.0.100 priority 1
                        apic1(config-radius)# exit

  2. Configure the node-level port authentication policy:

    Example:

    apic1(config)# policy-map type port-authentication mydot1x
                        apic1(config-pmap-port-authentication)# radius-provider-group myradiusgrp
                        apic1(config-pmap-port-authentication)# fail-auth-vlan 2001
                        apic1(config-pmap-port-authentication)# fail-auth-epg tenant tn1 application ap1 epg epg256
                        apic1(config-pmap-port-authentication)# exit

  3. Configure the policy group and specify the port authentication policy:

    Example:

    apic1(config)# template leaf-policy-group lpg2
                        apic1(config-leaf-policy-group)# port-authentication mydot1x
                        apic1(config-leaf-policy-group)# exit

  4. Configure the leaf switch profile:

    Example:

    apic1(config)# leaf-profile mylp2
                        apic1(config-leaf-profile)# leaf-group mylg2
                        apic1(config-leaf-group)# leaf-policy-group lpg2
                        apic1(config-leaf-group)# exit

The 802.1X node authentication policy is configured and associated with the leaf switch profile.