Authentication Manager; Port-Based Authentication Methods - Cisco IE-3000-8TC Software Configuration Manual

Chapter 12 Configuring IEEE 802.1x Port-Based Authentication

Authentication Manager

In Cisco IOS Release 12.2(46)SE and earlier, you could not use the same authorization methods, including
CLI commands and messages, on this switch and also on other network devices, such as a Catalyst 6000.
You had to use separate authentication configurations. Cisco IOS Release 12.2(50)SE and later supports
the same authorization methods on all Catalyst switches in a network.
•
•
•

Port-Based Authentication Methods

Table 12-1 802.1x Features
Authentication method
802.1x
MAC authentication bypass
Standalone web authentication
NAC Layer 2 IP validation
Web authentication as fallback
4
method
1. MDA = Multidomain authentication.
2. Also referred to as multiauth.
3. Supported in Cisco IOS Release 12.2(50)SE and later.
4. For clients that do not support 802.1x authentication.
OL-13018-03
Port-Based Authentication Methods, page 12-7
Per-User ACLs and Filter-Ids, page 12-8
Authentication Manager CLI Commands, page 12-8
Mode
Single host
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
3
ACL
Redirect URL
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
2
ACL
Redirect URL
4
Proxy ACL, Filter-Id attribute, downloadable ACL
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
Filter-Id attribute
Downloadable
2
ACL
Understanding IEEE 802.1x Port-Based Authentication
Multiple host
VLAN assignment
2
VLAN assignment
2
2 2
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
2 2
Filter-Id attribute
Downloadable
2
ACL
Cisco IE 3000 Switch Software Configuration Guide
Multiple
1
MDA Authentication
VLAN assignment Per-user ACL
2
Per-user ACL Filter-Id attribute
2
Filter-Id attribute Downloadable
ACL
Downloadable
2
ACL Redirect URL
2
Redirect URL
VLAN assignment Per-user ACL
2
Per-user ACL Filter-Id attribute
2
Filter-Id attribute Downloadable
ACL
Downloadable
2
ACL Redirect URL
2
Redirect URL
2
2
Filter-Id attribute Filter-Id attribute
Downloadable ACL Downloadable
ACL
Redirect URL
Redirect URL
Proxy ACL Proxy ACL
2
Filter-Id attribute Filter-Id attribute
Downloadable Downloadable
2
ACL ACL
22
2
2
2
2
2
2
2
2
2
2
2
2
2
2
12-7