Configuring 802.1X Authentication - Cisco WS-C3560-48PS-S Software Configuration Manual

Chapter 9 Configuring 802.1X Port-Based Authentication
Only one 802.1X-authenticated user is supported on a port. If the multiple-hosts mode is enabled on the
port, the per-user ACL attribute is disabled for the associated port.
The maximum size of the per-user ACL is 4000 ASCII characters.
For examples of vendor-specific attributes, see the
RADIUS Attributes" section on page
Chapter 27, "Configuring Network Security with ACLs."
To configure per-user ACLs, you need to perform these tasks:
•
•
•
•
•

Configuring 802.1X Authentication

These sections describe how to configure 802.1X port-based authentication on your switch:
•
•
•
•
•
•
•
•
•
•
•
•
78-16156-01
Enable AAA authentication.
Enable AAA authorization by using the network keyword to allow interface configuration from the
RADIUS server.
Enable 802.1X.
Configure the user profile and VSAs on the RADIUS server.
Configure the 802.1X port for single-host mode.
Default 802.1X Configuration, page 9-10
802.1X Configuration Guidelines, page 9-11
Configuring 802.1X Authentication, page 9-11
Configuring the Switch-to-RADIUS-Server Communication, page 9-13
Configuring Periodic Re-Authentication, page 9-14
Manually Re-Authenticating a Client Connected to a Port, page 9-14
Changing the Quiet Period, page 9-15
Changing the Switch-to-Client Retransmission Time, page 9-15
Setting the Switch-to-Client Frame-Retransmission Number, page 9-16
Configuring the Host Mode, page 9-17
Configuring a Guest VLAN, page 9-18
Resetting the 802.1X Configuration to the Default Values, page 9-18
"Configuring the Switch to Use Vendor-Specific
8-29. For more information about configuring ACLs, see
(required)
(optional)
(optional)
(optional)
(optional)
Catalyst 3560 Switch Software Configuration Guide
Configuring 802.1X Authentication
(required)
(optional)
(optional)
(optional)
(optional)
9-9