Cisco Catalyst 4500 Series Software Configuration Manual page 1321

Chapter 49 Configuring 802.1X Port-Based Authentication
TAG:
URL_Redirect:
URL-Redirect ACL:
Server Policies:
Idle timeout:
Resultant policies:
Idle timeout:
TAG:
URL Redirect:
URL Redirect ACL:
TAG:
Method status list:
Method
dot1x
The following command displays the contents of the downloadable ACL:
Switch# show ip access-lists xACSACLx-IP-auth-48b79b6e
Extended IP access list xACSACLx-IP-auth-48b79b6e (per-user)
10 permit udp any any
Switch(config)#
Cisco ACS Configuration for DACL
Only Cisco ACS supports DACL.
Note
To ensure correct functioning of the ACS configuration required for DACL, follow these steps:
Configure a downloadable IP ACL on the window that appears when you select
Step 1
Radius Shared Profile > Downloadable IP ACL Content (Figure 49-10).
Figure 49-10 Shared Profile Components
Step 2 Attach this downloadable ACL with the USER on the window that appears when you select User >
DACLs (Figure 49-11).
red
www.b.com
b
800 sec
500 sec
blue
www.a.com
a
red
State
Authc Success
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Configuring 802.1X Port-Based Authentication
49-41