X Configuration Guidelines - Cisco Catalyst 4500 Series Software Configuration Manual

Configuring 802.1X Port-Based Authentication
Table 49-1 Default 802.1X Configuration
Feature
Authentication, authorization, and accounting (AAA)
RADIUS server
IP address
•
UDP authentication port
•
Key
•
Per-interface 802.1X protocol enable state
Periodic reauthentication
Time between reauthentication attempts
Quiet period
Retransmission time
Maximum retransmission number
Multiple host support
Client timeout period
Authentication server timeout period

802.1X Configuration Guidelines

Guidelines for configuring 802.1X authentication include the following:
The 802.1X protocol is supported only on Layer 2 static access, PVLAN host ports, and Layer 3 routed ports. You cannot
•
configure 802.1X for any other port modes.
• If you are planning to use VLAN assignment, be aware that the features use general AAA commands. For information on
how to configure AAA, refer to the
to the Cisco IOS security documentation at this location:
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
49-28
Default Setting
Disabled
None specified
•
1645
•
None specified
•
Force-authorized
The port transmits and receives normal traffic without
802.1X-based authentication of the client.
Disabled
3600 sec
60 sec
Number of seconds that the switch remains in the quiet state
following a failed authentication exchange with the client.
30 sec
Number of seconds that the switch should wait for a response to
an EAP request/identity frame from the client before
retransmitting the request.
2
Number of times that the switch sends an EAP-request/identity
frame before restarting the authentication process.
Disabled
30 sec
When relaying a request from the authentication server to the
client, the amount of time that the switch waits for a response
before retransmitting the request to the client.
30 sec
When relaying a response from the client to the authentication
server, the amount of time that the switch waits for a reply before
retransmitting the response to the server. This setting is not
configurable.
"Enabling 802.1X Authentication" section on page
Chapter 49 Configuring 802.1X Port-Based Authentication
49-29. Alternatively, you can refer