Cisco 350XG series Administration Manual page 474

Security: 802.1X Authentication
Port Authentication
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
- Reject—If the RADIUS server authorized the supplicant, but did not
provide a supplicant VLAN, the supplicant is rejected.
- Static—If the RADIUS server authorized the supplicant, but did not
provide a supplicant VLAN, the supplicant is accepted.
• Guest VLAN—Select to indicate that the usage of a previously-defined
guest VLAN is enabled for the device. The options are:
- Selected—Enables using a guest VLAN for unauthorized ports. If a guest
VLAN is enabled, the unauthorized port automatically joins the VLAN
selected in the Guest VLAN ID field in the
After an authentication failure, and if guest VLAN is activated globally on
a given port, the guest VLAN is automatically assigned to the
unauthorized ports as an Untagged VLAN.
- Cleared—Disables guest VLAN on the port.
• Open Access—Select to successfully authenticate the port even though
authentication fails. See
• 802.1X Based Authentication—Select to enable 802.1X authentication on
the port.
• MAC Based Authentication—Select to enable port authentication based on
the supplicant MAC address. Only 8 MAC-based authentications can be
used on the port.
For MAC authentication to succeed, the RADIUS server supplicant
NOTE
username and password must be the supplicant MAC address. The MAC
address must be in lower case letters and entered without the . or -
separators; for example: 0020aa00bbcc.
• Web Based Authentication—Select to enable web-based authentication
based on the supplicant MAC address.
• Periodic Reauthentication—Select to enable port re-authentication
attempts after the specified Reauthentication Period.
• Reauthentication Period—Enter the number of seconds after which the
selected port is reauthenticated.
• Reauthenticate Now—Select to enable immediate port re-authentication.
• Authenticator State—Displays the defined port authorization state. The
options are:
- Initialize—In process of coming up.
Open Access.
Port Authentication
20
page.
458