Authentication Manager - Cisco IE-4000 Software Configuration Manual

Configuring IEEE 802.1x Port-Based Authentication
Information About Configuring IEEE 802.1x Port-Based Authentication

Authentication Manager

Port-Based Authentication Methods
Table 29 on page 194

Single host—Only one data or voice host (client) can be authenticated on a port.

Multiple host—Multiple data hosts can be authenticated on the same port. (If a port becomes unauthorized in
multiple-host mode, the switch denies network access to all of the attached clients.)

Multidomain authentication (MDA)—Both a data device and voice device can be authenticated on the same switch
port. The port is divided into a data domain and a voice domain.

Multiple authentication—Multiple hosts can authenticate on the data VLAN. This mode also allows one client on the
VLAN if a voice VLAN is configured.
Table 29 802.1x Features
Authentication Method
802.1x
MAC authentication bypass
Standalone web authentication
NAC Layer 2 IP validation
Web authentication as fallback
3
method
1. MDA = Multidomain authentication.
2. Also referred to as multiauth.
3. For clients that do not support 802.1x authentication.
lists the authentication methods supported in these host modes:
Mode
Single Host
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable ACL
Redirect URL
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable ACL
Redirect URL
Proxy ACL, Filter-Id attribute, downloadable ACL
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
Filter-Id attribute
Downloadable ACL
Multiple Host MDA
VLAN assignment VLAN assignment
Per-user ACL Per-user ACL
Filter-ID attribute Filter-Id attribute
Downloadable ACL Downloadable ACL
Redirect URL Redirect URL
VLAN assignment VLAN assignment
Per-user ACL Per-user ACL
Filter-ID attribute Filter-Id attribute
Downloadable ACL Downloadable ACL
Redirect URL Redirect URL
Filter-Id attribute Filter-Id attribute
Downloadable ACL Downloadable ACL
Redirect URL Redirect URL
Proxy ACL Proxy ACL
Filter-Id attribute Filter-Id attribute
Downloadable ACL Downloadable ACL
194
1
Multiple
Authentication
Per-user ACL
Filter-Id attribute
Downloadable ACL
Redirect URL
Per-user ACL
Filter-Id attribute
Downloadable ACL
Redirect URL
2
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
Filter-Id attribute
Downloadable ACL
2
3
3