Cisco 500 series Administration Manual page 325

Configuring Security
Configuring 802. 1 X
STEP 3
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
NOTE
STEP 1
STEP 2
Cisco 500 Series Stackable Managed Switch Administration Guide
The VLAN Authentication Table displays all VLANs, and indicates whether
authentication has been enabled on them.
Click Apply. The 802. 1 X properties are written to the Running Configuration file.
Configuring Unauthenticated VLANs
When a port is 802. 1 x-enabled, unauthorized ports or devices are not allowed to
access a VLAN unless the VLAN is a Guest VLAN or an unauthenticated VLAN. You
can make a static VLAN an authenticated VLAN by using the procedure in the
Defining 802.1X Properties
unauthorized devices or ports to send or receive packets to or from
unauthenticated VLANs. You must manually add ports to VLANs by using the Port
to VLAN page.
Click Security > 802.1X > Properties. The Properties page is displayed.
Select a VLAN, and click Edit. The Edit VLAN Authentication page is displayed.
Select a VLAN.
Optionally, uncheck Authentication to make the VLAN an unauthenticated VLAN.
Click Apply, and the Running Configuration file is updated.
Defining 802.1X Port Authentication
The Port Authentication page enables configuration of 802. 1 X parameters for
each port. Since some of the configuration changes are only possible while the
Force Authorized
port is in
that you change the port control to
When the configuration is complete, return the port control to its previous state.
A port with 802. 1 x defined on it cannot become a member of a LAG.
To define 802. 1 X authentication:
Click Security > 802.1X > Port Authentication. The Port Authentication page is
displayed.
This page displays authentication settings for all ports.
Select a port, and click Edit. The Edit Port Authentication page is displayed.
section, allowing both 802. 1 x authorized and
state, such as host authentication, it is recommended
Force Authorized
18
before making changes.
325