Ieee 802.1X Authentication Configuration Guidelines; Ieee 802.1X Authentication - Cisco WS-C2960-24LC-S Software Configuration Manual

Configuring IEEE 802.1x Authentication
Table 9-2 Default IEEE 802.1x Authentication Configuration (continued)
Feature
Retransmission time
Maximum retransmission number
Client timeout period
Authentication server timeout period
Guest VLAN
Inaccessible authentication bypass
Restricted VLAN
Authenticator (switch) mode
MAC authentication bypass

IEEE 802.1x Authentication Configuration Guidelines

These section has configuration guidelines for these features:
•
•
•

IEEE 802.1x Authentication

These are the IEEE 802.1x authentication configuration guidelines:
•
•
•
Catalyst 2960 Switch Software Configuration Guide
9-20
Default Setting
30 seconds (number of seconds that the switch should wait for a response to an
EAP request/identity frame from the client before resending the request).
2 times (number of times that the switch will send an EAP-request/identity
frame before restarting the authentication process).
30 seconds (when relaying a request from the authentication server to the
client, the amount of time the switch waits for a response before resending the
request to the client.)
30 seconds (when relaying a response from the client to the authentication
server, the amount of time the switch waits for a reply before resending the
response to the server. This setting is not configurable.)
None specified.
Disabled.
None specified.
None specified.
Disabled.
IEEE 802.1x Authentication, page 9-20
VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass, page
9-21
MAC Authentication Bypass, page 9-22
When IEEE 802.1x authentication is enabled, ports are authenticated before any other Layer 2
feature is enabled.
If you try to change the mode of an IEEE 802.1x-enabled port (for example, from access to trunk),
an error message appears, and the port mode is not changed.
If the VLAN to which an IEEE 802.1x-enabled port is assigned changes, this change is transparent
and does not affect the switch. For example, this change occurs if a port is assigned to a RADIUS
server-assigned VLAN and is then assigned to a different VLAN after re-authentication.
If the VLAN to which an IEEE 802.1x port is assigned to shut down, disabled, or removed, the port
becomes unauthorized. For example, the port is unauthorized after the access VLAN to which a port
is assigned shuts down or is removed.
Chapter 9 Configuring IEEE 802.1x Port-Based Authentication
OL-8603-04