Configuring 802.1X Port-Based Authentication - Cisco Catalyst 4500 Series Configuration Manual

Configuring 802.1X Port-Based Authentication

switch denies access to the network for all wireless access point-attached clients. In this topology, the
wireless access point is responsible for authenticating clients attached to it, and the wireless access point
acts as a client to the switch.
Figure 44-9
Wireless
clients
Supplicants
Configuring 802.1X Port-Based Authentication
To configure 802.1X, follow this procedure:
Enable 802.1X authentication. See the
Step 1
Configure switch to RADIUS server communication. See the
Step 2
Communication" section on page
Adjust the 802.1X timer values. See the
Step 3
Configure optional features. See the
Step 4
page
These sections describe how to configure 802.1X:
•
•
•
•
•
•
•
•
•
•
•
•
•
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
44-26
Wireless LAN Example
Wireless
access point
44-51.
Default 802.1X Configuration, page 44-27
802.1X Configuration Guidelines, page 44-28
Enabling 802.1X Authentication, page 44-28
Configuring Switch-to-RADIUS-Server Communication, page 44-32
Configuring Multiple Domain Authentication and Multiple Authorization, page 44-34
Configuring 802.1X Authentication with ACL Assignments and Redirect URLs, page 44-38
Configuring 802.1X Authentication with Per-User ACL and Filter-ID ACL, page 44-44
Configuring RADIUS-Provided Session Timeouts, page 44-51
Configuring MAC Move, page 44-53
Configuring MAC Replace, page 44-53
Configuring Violation Action, page 44-54
Configuring 802.1X with Guest VLANs, page 44-55
Configuring 802.1X with MAC Authentication Bypass, page 44-58
Chapter 44
Catalyst 4500 Network
Access Switch
Authenticator
"Enabling 802.1X Authentication" section on page
44-32.
"Changing the Quiet Period" section on page
"Configuring RADIUS-Provided Session Timeouts" section on
(required)
(optional)
(optional)
(optional)
(optional)
Configuring 802.1X Port-Based Authentication
RADIUS
Authentication server
"Configuring Switch-to-RADIUS-Server
44-81.
(required)
(optional)
(optional)
44-28.
OL-25340-01