Cisco 350 Series Administration Manual page 538

Security: 802.1X Authentication
Port Authentication
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
- Auto—Enables port-based authentication and authorization on the device. The
interface moves between an authorized or unauthorized state based on the
authentication exchange between the device and the client.
- Force Authorized—Authorizes the interface without authentication.
• RADIUS VLAN Assignment—Select to enable Dynamic VLAN assignment on the
selected port.
- Disable—Feature is not enabled.
- Reject—If the RADIUS server authorized the supplicant, but did not provide a
supplicant VLAN, the supplicant is rejected.
- Static—If the RADIUS server authorized the supplicant, but did not provide a
supplicant VLAN, the supplicant is accepted.
• Guest VLAN—Select to enable using a guest VLAN for unauthorized ports. If a guest
VLAN is enabled, the unauthorized port automatically joins the VLAN selected in the
Guest VLAN ID field in the
and if guest VLAN is activated globally on a given port, the guest VLAN is
automatically assigned to the unauthorized ports as an Untagged VLAN.
• Open Access—Select to successfully authenticate the port even though authentication
fails. See Open Access.
• 802.1X Based Authentication—Select to enable 802.1X authentication on the port.
• MAC Based Authentication—Select to enable port authentication based on the
supplicant MAC address. Only 8 MAC-based authentications can be used on the port.
For MAC authentication to succeed, the RADIUS server supplicant username
NOTE
and password must be the supplicant MAC address. The MAC address must be in lower
case letters and entered without the. or - separators; for example: 0020aa00bbcc.
• Web Based Authentication—Select to enable web-based authentication based on the
supplicant MAC address.
• Periodic Reauthentication—Select to enable port re-authentication attempts after the
specified Reauthentication Period.
• Reauthentication Period—Enter the number of seconds after which the selected port
is reauthenticated.
• Reauthenticate Now—Select to enable immediate port re-authentication.
• Authenticator State—Displays the defined port authorization state. The options are:
- Initialize—In process of coming up.
Port Authentication page. After an authentication failure,
18
367