Per-User Acls And Filter-Ids; Authentication Manager Cli Commands - Cisco WS-CBS3032-DEL Software Configuration Manual

Chapter 9 Configuring IEEE 802.1x Port-Based Authentication

Per-User ACLs and Filter-Ids

In releases earlier than Cisco IOS Release 12.2(50)SE, an ACL configured on the switch is not
compatible with an ACL configured on another device running Cisco IOS software, such as a
Catalyst 6000 switch.
In Cisco IOS Release 12.2(50)SE or later, the ACLs configured on the switch are compatible with other
devices running Cisco IOS release.
You can only set any as the source in the ACL.
For any ACL configured for multiple-host mode, the source portion of statement must be any. (For
Note
example, permit icmp any host 10.10.1.1.)

Authentication Manager CLI Commands

The authentication-manager interface-configuration commands control all the authentication methods,
such as 802.1x, MAC authentication bypass, and web authentication. The authentication manager
commands determine the priority and order of authentication methods applied to a connected host.
The authentication manager commands control generic authentication features, such as host-mode,
violation mode, and the authentication timer. Generic authentication commands include the
authentication host-mode, authentication violation, and authentication timer interface
configuration commands.
802.1x-specific commands begin with the dot1x or authentication keyword. For example, the
authentication port-control auto interface configuration command enables authentication on an
interface. However, the dot1x system-authentication control global configuration command only
globally enables or disables 802.1x authentication.
If 802.1x authentication is globally disabled, other authentication methods are still enabled on that port,
Note
such as web authentication.
OL-13270-06
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
Understanding IEEE 802.1x Port-Based Authentication
9-9