Free tool · No upload · No sign-up

Cisco 802.1X NAC Config Generator

The complete switch side of a NAC rollout, not just three AAA lines: RADIUS with CoA and accounting, 802.1X + MAB port templates, device tracking, critical-auth handling, MAC-notification and SNMP traps — for classic IOS and IOS-XE, in legacy commands or IBNS 2.0 policy-map style. Presets for FortiNAC, Cisco ISE and Microsoft NPS. Everything is generated in your browser; nothing you type is sent anywhere.

Feedback

Platform & style

IOS-XE 16.x/17.x (Cat 9k) Classic IOS 15.x (2960/3x50)

Legacy authentication commands IBNS 2.0 policy-map (new-style)

IBNS 2.0 (class-maps + policy-map type control subscriber) is IOS-XE only. Legacy commands work on both and are auto-translated on IOS-XE.

Deployment mode

NAC / RADIUS servers NAC platform preset (sets CoA, MAC format & trap defaults)

Primary RADIUS IP Secondary RADIUS IP (blank = none)

Auth port Acct port

Shared secret

Server group name RADIUS source interface

VRF (blank = global routing table) Enable CoA (RFC 5176 dynamic authorization) Add automate-tester probe user (keeps dead detection honest)

Authentication behaviour

Auth order Host mode

tx-period (s) max-reauth-req

Reauthentication MAC format (RADIUS attr 31, for MAB)

Accounting interim updates

Access ports & VLANs Interface range

Data VLAN Voice VLAN (blank = none) Critical VLAN (RADIUS dead)

Guest VLAN (no 802.1X client; blank = none) Auth-fail VLAN (legacy only; blank = none)

MAC notification & SNMP traps MAC-notification traps (add/remove/move) — needed for FortiNAC L2 visibility

SNMP trap receiver IP SNMP community (v2c)

Also send linkUp/linkDown traps

Related IPWOX tools: RADIUS & SNMP Decoder · RADIUS Log Viewer · Bulk MAC Address Lookup — all free, all run in your browser. See all tools.