Port Authentication - Cisco SX350 Series Administration Manual

17

Port Authentication

NOTE
STEP 1
STEP 2
STEP 3
323
The Port Authentication page enables configuration of parameters for each port. Since some of
the configuration changes are only possible while the port is in Force Authorized state, such as
host authentication, it is recommended that you change the port control to Force Authorized
before making changes. When the configuration is complete, return the port control to its
previous state.
A port with 802.1x defined on it cannot become a member of a LAG.
802.1x and Port Security cannot be enabled on same port at same time. If you enable port
security on an interface, the Administrative Port Control cannot be changed to Auto mode.
To define 802.1X authentication:
Click Security > 802.1X/MAC/Web Authentication > Port Authentication.
This page displays authentication settings for all ports.
Select a port (including the OOB port), and click Edit.
Enter the parameters.
• Interface—Select a port (including the OOB port).
• Current Port Control—Displays the current port authorization state. If the state is
Authorized, the port is either authenticated or the Administrative Port Control is Force
Authorized. Conversely, if the state is Unauthorized, then the port is either not
authenticated or the Administrative Port Control is Force Unauthorized.
• Administrative Port Control—Select the Administrative Port Authorization state.
The options are:
- Force Unauthorized—Denies the interface access by moving the interface into the
unauthorized state. The device does not provide authentication services to the client
through the interface.
- Auto—Enables port-based authentication and authorization on the device. The
interface moves between an authorized or unauthorized state based on the
authentication exchange between the device and the client.
- Force Authorized—Authorizes the interface without authentication.
• RADIUS VLAN Assignment—Select to enable Dynamic VLAN assignment on the
selected port.
- Disable—Feature is not enabled.
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
Security: 802.1X Authentication
Port Authentication