20
STEP 1
STEP 2
397
The device also uses the Guest VLAN for the authentication process at ports
configured with Multiple Session mode and MAC-based authentication. Therefore,
you must configure a Guest VLAN before you can use the MAC authentication
mode.
802.1X Parameters Workflow
Define the 802. 1 X parameters as follows:
•
Optional) Set a time range(s) using the Time Range and Recurring Range
pages. These are used in the Edit Port Authentication page.
•
(Optional) Define one or more static VLANs as unauthenticated VLANs as
described in the
and unauthorized devices or ports can always send or receive packets to or
from unauthenticated VLANs.
•
Define 802. 1 X settings for each port by using the Edit Port Authentication
page.
Note the following:
•
On this page, DVA can be activated on a port by selecting the RADIUS
VLAN Assignment field.
•
You can select the Guest VLAN field to have untagged incoming frames go
to the guest VLAN.
•
Define host authentication parameters for each port using the Port
Authentication page.
•
View 802. 1 X authentication history using the Authenticated Hosts page.
Defining 802.1X Properties
The 802. 1 X Properties page is used to globally enable 802. 1 X and define how
ports are authenticated. For 802. 1 X to function, it must be activated both globally
and individually on each port.
To define port-based authentication:
Click Security > 802.1X > Properties.
Enter the parameters.
Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3
Defining 802.1X Properties
Security
Configuring 802. 1 X
section. 802. 1 x authorized