Chapter 12
Configuring IEEE 802.1x Port-Based Authentication
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Default 802.1x Authentication Configuration
Table 12-4
Table 12-4
Default 802.1x Authentication Configuration
Feature
Switch 802.1x enable state
Per-port 802.1x enable state
AAA
RADIUS server
IP address
•
UDP authentication port
•
Key
•
OL-13018-03
Configuring 802.1x Violation Modes, page 12-32
Configuring the Switch-to-RADIUS-Server Communication, page 12-34
Configuring the Host Mode, page 12-35
Configuring Periodic Re-Authentication, page 12-37
Manually Re-Authenticating a Client Connected to a Port, page 12-38
Changing the Quiet Period, page 12-38
Changing the Switch-to-Client Retransmission Time, page 12-39
Setting the Switch-to-Client Frame-Retransmission Number, page 12-39
Setting the Re-Authentication Number, page 12-40
Configuring 802.1x Accounting, page 12-41
Configuring a Guest VLAN, page 12-42
Configuring a Restricted VLAN, page 12-43
Configuring the Inaccessible Authentication Bypass Feature, page 12-45
Configuring 802.1x Authentication with WoL, page 12-47
Configuring MAC Authentication Bypass, page 12-48
Configuring NAC Layer 2 802.1x Validation, page 12-49
Configuring 802.1x Switch Supplicant with NEAT, page 12-50
Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs, page 12-52
Configuring Flexible Authentication Ordering, page 12-54
Configuring Web Authentication, page 12-55
Disabling 802.1x Authentication on the Port, page 12-58
Resetting the 802.1x Authentication Configuration to the Default Values, page 12-59
shows the default 802.1x authentication configuration.
Default Setting
Disabled.
Disabled (force-authorized).
The port sends and receives normal traffic without 802.1x-based
authentication of the client.
Disabled.
None specified.
•
1812.
•
None specified.
•
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
(optional)
Cisco IE 3000 Switch Software Configuration Guide
Configuring 802.1x Authentication
(required)
(optional)
(optional)
(optional)
(optional)
12-27