Cisco Catalyst 3560-X Software Configuration Manual page 296

Understanding IEEE 802.1x Port-Based Authentication
Port-Based Authentication Methods
Table 1-1 802.1x Features
Authentication method
802.1x
MAC authentication bypass
Standalone web authentication
NAC Layer 2 IP validation
Web authentication as fallback
4
method
1. MDA = Multidomain authentication.
2. Also referred to as multiauth.
3. Supported in Cisco IOS Release 12.2(50)SE and later.
4. For clients that do not support 802.1x authentication.
Per-User ACLs and Filter-Ids
ACLs configured on the switch are compatible with other devices running Cisco IOS releases.
You can only set any as the source in the ACL.
For any ACL configured for multiple-host mode, the source portion of statement must be any. (For
Note
example, permit icmp any host 10.10.1.1.)
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
1-8
Mode
Single host
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
3
ACL
2
Redirect URL
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
2
ACL
2
Redirect URL
4
Proxy ACL, Filter-Id attribute, downloadable ACL
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
Filter-Id attribute
Downloadable
2
ACL
Chapter 1
Multiple host MDA
VLAN assignment VLAN assignment
Per-user ACL
Filter-Id attribute
Downloadable
ACL
Redirect URL
VLAN assignment VLAN assignment
Per-user ACL
Filter-Id attribute
Downloadable
ACL
Redirect URL
2 2
Filter-Id attribute Filter-Id attribute
Downloadable ACL Downloadable ACL
Redirect URL Redirect URL
Proxy ACL Proxy ACL
2 2
Filter-Id attribute Filter-Id attribute
Downloadable Downloadable
2
ACL ACL
Configuring IEEE 802.1x Port-Based Authentication
Multiple
1
Authentication
Per-user ACL
2
Filter-Id attribute
2
Downloadable
2
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable
2
ACL
2
Redirect URL
2
2
2
Filter-Id attribute
Downloadable
2
ACL
Redirect URL
Proxy ACL
2
Filter-Id attribute
Downloadable
2 2
ACL
22
2
2
2
2
2
2
2
2
2
2
OL-25303-03