Using Ieee 802.1X Authentication With Vlan Assignment - Cisco Catalyst 3120 Software Manual

Understanding IEEE 802.1x Port-Based Authentication
Table 9-1
Attribute Number
Attribute[8]
Attribute[25]
Attribute[30]
Attribute[31]
Attribute[40]
Attribute[41]
Attribute[42]
Attribute[43]
Attribute[44]
Attribute[45]
Attribute[46]
Attribute[49]
Attribute[61]
1. The Framed-IP-Address AV pair is sent only if a valid Dynamic Host Control Protocol (DHCP) binding
You can view the AV pairs that are being sent by the switch by entering the debug radius accounting
privileged EXEC command. For more information about this command, see the Cisco IOS Debug
Command Reference, Release 12.2 at this URL:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_command_reference_book09186a008
00872ce.html
For more information about AV pairs, see RFC 3580, "IEEE 802.1X Remote Authentication Dial In User
Service (RADIUS) Usage Guidelines."

Using IEEE 802.1x Authentication with VLAN Assignment

The switch supports IEEE 802.1x authentication with VLAN assignment. After successful IEEE 802.1x
authentication of a port, the RADIUS server sends the VLAN assignment to configure the switch port.
The RADIUS server database maintains the username-to-VLAN mappings, assigning the VLAN based
on the username of the client connected to the switch port. You can use this feature to limit network
access for certain users.
Cisco Catalyst Blade Switch 3120 for HP Software Configuration Guide
9-10
Accounting AV Pairs (continued)
AV Pair Name
Framed-IP-Address
Class
Called-Station-ID
Calling-Station-ID
Acct-Status-Type
Acct-Delay-Time
Acct-Input-Octets
Acct-Output-Octets
Acct-Session-ID
Acct-Authentic
Acct-Session-Time
Acct-Terminate-Cause
NAS-Port-Type
exists for the host in the DHCP snooping bindings table.
Chapter 9 Configuring IEEE 802.1x Port-Based Authentication
START INTERIM
1
Never Sometimes
Always Always
Always Always
Always Always
Always Always
Always Always
Never Never
Never Never
Always Always
Always Always
Never Never
Never Never
Always Always
STOP
1
Sometimes
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
Always
OL-12247-01