Cisco Catalyst 3750-E Software Configuration Manual page 286

Understanding IEEE 802.1x Port-Based Authentication
Until the client is authenticated, IEEE 802.1x access control allows only Extensible Authentication
Protocol over LAN (EAPOL), Cisco Discovery Protocol (CDP), and Spanning Tree Protocol (STP)
traffic through the port to which the client is connected. After authentication is successful, normal traffic
can pass through the port.
Device Roles, page 10-3
•
Authentication Process, page 10-4
•
Authentication Initiation and Message Exchange, page 10-6
•
• Authentication Manager, page 10-8
• Ports in Authorized and Unauthorized States, page 10-11
• 802.1x Authentication and Switch Stacks, page 10-11
802.1x Host Mode, page 10-12
•
MAC Move, page 10-13
•
802.1x Accounting, page 10-15
•
802.1x Accounting Attribute-Value Pairs, page 10-15
•
802.1x Multiple Authentication Mode, page 10-13
•
802.1x Readiness Check, page 10-16
•
802.1x Authentication with Per-User ACLs, page 10-18
•
802.1x Authentication with Guest VLAN, page 10-21
•
802.1x Authentication with Restricted VLAN, page 10-22
•
802.1x Authentication with Inaccessible Authentication Bypass, page 10-23
•
• 802.1x Authentication with Downloadable ACLs and Redirect URLs, page 10-19
• VLAN ID-based MAC Authentication, page 10-21
• IEEE 802.1x Authentication with Voice VLAN Ports, page 10-25
IEEE 802.1x Authentication with Port Security, page 10-26
•
IEEE 802.1x Authentication with Wake-on-LAN, page 10-27
•
IEEE 802.1x Authentication with MAC Authentication Bypass, page 10-28
•
802.1x User Distribution, page 10-25
•
Network Admission Control Layer 2 IEEE 802.1x Validation, page 10-29
•
Multidomain Authentication, page 10-30
•
Flexible Authentication Ordering, page 10-29
•
Open1x Authentication, page 10-29
•
802.1x Supplicant and Authenticator Switches with Network Edge Access Topology (NEAT),
•
page 10-31
Voice Aware 802.1x Security, page 10-32
•
Common Session ID, page 10-33
•
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
10-2
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
OL-9775-08