{"app":"simulateur-reseau","v":1,"opts":{"strictCables":false,"stpFast":true},"devices":[{"id":"D1","type":"switch","model":"sw-2960","name":"SW1","x":350,"y":150,"powered":true,"cli":"!\nhostname SW1\n!\nspanning-tree mode pvst\nvlan 20\n name PERSONNEL\n!\ninterface FastEthernet0/24\n switchport access vlan 20\n switchport mode access\n!\ninterface Vlan20\n ip address 192.168.20.2 255.255.255.0\n!\nline con 0\n logging synchronous\nline vty 0 4\n!","label":""},{"id":"D2","type":"server","model":"srv-linux","name":"RADIUS","x":600,"y":300,"powered":true,"ifaces":[{"name":"ens33","ip":"192.168.20.5","mask":"255.255.255.0","dhcp":false}],"gw":"","dns":[],"domain":"","allowIcmpEcho":true,"wifi":{"ssid":"","key":""},"hosts":{},"dhcpd":{"enabled":false,"excluded":[],"pools":[]},"dnsd":{"enabled":false,"records":[],"forwarders":[]},"httpd":{"enabled":false,"https":false,"pages":{"/":{"type":"text/html; charset=utf-8","body":"<html><head><title>RADIUS</title></head><body><h1>Bienvenue sur RADIUS</h1><p>Serveur web du simulateur.</p></body></html>"}}},"mgmt":{"comms":[],"location":"","contact":"","syslogd":false,"trapd":false},"v6":{"ifs":[{"name":"ens33","autoconf":true,"addrs":[]}],"statics":[]},"rad":{"enabled":true,"eapType":"peap","clients":[{"ip":"192.168.20.2","mask":"255.255.255.255","secret":"Secret-Borne-Lab","name":"SW1"}],"users":[{"name":"alice","pass":"Lab-2026","vlan":20,"reply":"","disabled":false}]},"label":""},{"id":"D3","type":"pc","model":"pc-win","name":"PC1","x":150,"y":300,"powered":true,"ifaces":[{"name":"Ethernet0","ip":"192.168.20.10","mask":"255.255.255.0","dhcp":false}],"gw":"","dns":[],"domain":"","allowIcmpEcho":true,"wifi":{"ssid":"","key":""},"hosts":{},"dhcpd":{"enabled":false,"excluded":[],"pools":[]},"dnsd":{"enabled":false,"records":[],"forwarders":[]},"httpd":{"enabled":false,"https":false,"pages":{"/":{"type":"text/html; charset=utf-8","body":"<html><head><title>PC1</title></head><body><h1>Bienvenue sur PC1</h1><p>Serveur web du simulateur.</p></body></html>"}}},"mgmt":{"comms":[],"location":"","contact":"","syslogd":false,"trapd":false},"v6":{"ifs":[{"name":"Ethernet0","autoconf":true,"addrs":[]}],"statics":[]},"label":""}],"links":[{"a":["D2","ens33"],"b":["D1","FastEthernet0/24"],"type":"straight"},{"a":["D3","Ethernet0"],"b":["D1","FastEthernet0/1"],"type":"straight"}],"notes":"","tpfile":{"v":1,"id":"cours-bts2b3-s07-8021x","type":"decouverte","diff":3,"cat":"Cours BTS SIO — 2e année","level":"BTS SIO SISR 2e année — Bloc 3 — S07","duration":"1 h","title":"S07 — 802.1X : un commutateur authentifie un poste auprès d'un serveur RADIUS","desc":"Côté réseau du TP RADIUS : configurer un commutateur Cisco comme authentificateur 802.1X, vers un serveur RADIUS déjà prêt (utilisateur alice placée dans le VLAN 20), puis constater le blocage avant authentification et l'attribution du VLAN après.","objectives":["Configurer AAA, le serveur RADIUS et le secret partagé sur un commutateur","Activer 802.1X sur un port d'accès","Constater le refus avant authentification, puis l'acceptation et le VLAN attribué"],"steps":["Le plan : un commutateur <code>SW1</code>, un serveur <code>RADIUS</code> (<code>192.168.20.5</code>, VLAN 20, utilisateur <code>alice</code> / <code>Lab-2026</code>, secret partagé <code>Secret-Borne-Lab</code>) et un poste <code>PC1</code> sur <code>fa0/1</code>. Le serveur est déjà configuré : vous configurez l'<b>authentificateur</b>.","Sur <b>SW1</b> : <code>aaa new-model</code>, puis <code>radius server RAD</code> avec <code>address ipv4 192.168.20.5 auth-port 1812 acct-port 1813</code> et <code>key Secret-Borne-Lab</code>.","<code>aaa authentication dot1x default group radius</code>, <code>aaa authorization network default group radius</code> (pour le VLAN attribué) et <code>dot1x system-auth-control</code>.","Sur le port du poste : <code>interface fa0/1</code>, <code>switchport mode access</code>, <code>authentication port-control auto</code> et <code>dot1x pae authenticator</code>.","Avant authentification : <code>PC1</code> ne joint pas le serveur (le port est fermé, sauf pour les trames d'authentification). Ouvrez l'onglet <b>802.1X</b> de PC1, saisissez <code>alice</code> / <code>Lab-2026</code>, méthode PEAP, puis activez le demandeur (<i>supplicant</i>).","Contrôlez sur SW1 : <code>show authentication sessions</code> (état Auth) puis <code>show authentication sessions interface fa0/1</code> (utilisateur, état Authorized, <i>Vlan Policy</i> : 20). Testez le ping vers le serveur, puis un mauvais mot de passe : le port reste fermé. Cliquez sur « Vérifier mon travail »."],"checks":[{"t":"cli","label":"SW1 : AAA activé et serveur RADIUS déclaré avec son secret","dev":"SW1","cmd":"show running-config","match":"aaa new-model[\\s\\S]*radius server RAD[\\s\\S]*address ipv4 192\\.168\\.20\\.5[\\s\\S]*key Secret-Borne-Lab"},{"t":"cli","label":"SW1 : authentification 802.1X par RADIUS et dot1x system-auth-control","dev":"SW1","cmd":"show running-config","match":"aaa authentication dot1x default group radius[\\s\\S]*dot1x system-auth-control"},{"t":"cli","label":"SW1 : fa0/1 en port-control auto avec dot1x pae authenticator","dev":"SW1","cmd":"show running-config","match":"interface FastEthernet0/1[\\s\\S]*?authentication port-control auto[\\s\\S]*?dot1x pae authenticator"},{"t":"cli","label":"SW1 : le poste est authentifié sur fa0/1","dev":"SW1","cmd":"show authentication sessions","match":"Fa0/1\\s+\\S+\\s+dot1x\\s+\\S+\\s+Auth"},{"t":"cli","label":"SW1 : alice est autorisée sur fa0/1 avec le VLAN 20 attribué par RADIUS","dev":"SW1","cmd":"show authentication sessions interface fa0/1","match":"User-Name:\\s+alice[\\s\\S]*Status:\\s+Authorized[\\s\\S]*Vlan Policy:\\s+20"},{"t":"ping","label":"PC1 joint le serveur RADIUS une fois authentifié","from":"PC1","to":"192.168.20.5","wait":3000}],"solution":{"app":"simulateur-reseau","v":1,"opts":{"strictCables":false,"stpFast":true},"devices":[{"id":"D1","type":"switch","model":"sw-2960","name":"SW1","x":350,"y":150,"powered":true,"cli":"!\nhostname SW1\n!\nspanning-tree mode pvst\nvlan 20\n name PERSONNEL\n!\naaa new-model\naaa authentication dot1x default group radius\naaa authorization network default group radius\n!\ndot1x system-auth-control\n!\nradius server RAD\n address ipv4 192.168.20.5 auth-port 1812 acct-port 1813\n key Secret-Borne-Lab\n!\ninterface FastEthernet0/1\n switchport mode access\n authentication port-control auto\n dot1x pae authenticator\n!\ninterface FastEthernet0/24\n switchport access vlan 20\n switchport mode access\n!\ninterface Vlan20\n ip address 192.168.20.2 255.255.255.0\n!\nline con 0\n logging synchronous\nline vty 0 4\n!","label":""},{"id":"D2","type":"server","model":"srv-linux","name":"RADIUS","x":600,"y":300,"powered":true,"ifaces":[{"name":"ens33","ip":"192.168.20.5","mask":"255.255.255.0","dhcp":false}],"gw":"","dns":[],"domain":"","allowIcmpEcho":true,"wifi":{"ssid":"","key":""},"hosts":{},"dhcpd":{"enabled":false,"excluded":[],"pools":[]},"dnsd":{"enabled":false,"records":[],"forwarders":[]},"httpd":{"enabled":false,"https":false,"pages":{"/":{"type":"text/html; charset=utf-8","body":"<html><head><title>RADIUS</title></head><body><h1>Bienvenue sur RADIUS</h1><p>Serveur web du simulateur.</p></body></html>"}}},"mgmt":{"comms":[],"location":"","contact":"","syslogd":false,"trapd":false},"v6":{"ifs":[{"name":"ens33","autoconf":true,"addrs":[]}],"statics":[]},"rad":{"enabled":true,"eapType":"peap","clients":[{"ip":"192.168.20.2","mask":"255.255.255.255","secret":"Secret-Borne-Lab","name":"SW1"}],"users":[{"name":"alice","pass":"Lab-2026","vlan":20,"reply":"","disabled":false}]},"label":""},{"id":"D3","type":"pc","model":"pc-win","name":"PC1","x":150,"y":300,"powered":true,"ifaces":[{"name":"Ethernet0","ip":"192.168.20.10","mask":"255.255.255.0","dhcp":false}],"gw":"","dns":[],"domain":"","allowIcmpEcho":true,"wifi":{"ssid":"","key":""},"hosts":{},"dhcpd":{"enabled":false,"excluded":[],"pools":[]},"dnsd":{"enabled":false,"records":[],"forwarders":[]},"httpd":{"enabled":false,"https":false,"pages":{"/":{"type":"text/html; charset=utf-8","body":"<html><head><title>PC1</title></head><body><h1>Bienvenue sur PC1</h1><p>Serveur web du simulateur.</p></body></html>"}}},"mgmt":{"comms":[],"location":"","contact":"","syslogd":false,"trapd":false},"v6":{"ifs":[{"name":"Ethernet0","autoconf":true,"addrs":[]}],"statics":[]},"sup":{"enabled":true,"user":"alice","pass":"Lab-2026","method":"peap"},"label":""}],"links":[{"a":["D2","ens33"],"b":["D1","FastEthernet0/24"],"type":"straight"},{"a":["D3","Ethernet0"],"b":["D1","FastEthernet0/1"],"type":"straight"}],"notes":""}}}