Authentication Manager; Port-Based Authentication Methods - Cisco Catalyst 3750-X Software Configuration Manual

Understanding IEEE 802.1x Port-Based Authentication

Authentication Manager

In Cisco IOS Release 12.2(46)SE and earlier, you could not use the same authorization methods, including
CLI commands and messages, on this switch and also on other network devices, such as a Catalyst 6000.
You had to use separate authentication configurations. Cisco IOS Release 12.2(50)SE and later supports
the same authorization methods on all Catalyst switches in a network.
•
•
•

Port-Based Authentication Methods

Table 11-1 802.1x Features
Authentication method
802.1x
MAC authentication bypass
Standalone web authentication
NAC Layer 2 IP validation
Web authentication as fallback
4
method
1. MDA = Multidomain authentication.
2. Also referred to as multiauth.
3. Supported in Cisco IOS Release 12.2(50)SE and later.
4. For clients that do not support 802.1x authentication.
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
11-8
Port-Based Authentication Methods, page 11-8
Per-User ACLs and Filter-Ids, page 11-9
Authentication Manager CLI Commands, page 11-9
Mode
Single host
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
3
ACL
Redirect URL
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
2
ACL
Redirect URL
4
Proxy ACL, Filter-Id attribute, downloadable ACL
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
Filter-Id attribute
Downloadable
2
ACL
Chapter 11
Multiple host
VLAN assignment
2
VLAN assignment
2
2 2
Filter-Id attribute
Downloadable ACL
Redirect URL
Proxy ACL
2 2
Filter-Id attribute
Downloadable
2
ACL
Configuring IEEE 802.1x Port-Based Authentication
Multiple
1
MDA Authentication
VLAN assignment Per-user ACL
2
Per-user ACL Filter-Id attribute
2
Filter-Id attribute Downloadable
ACL
Downloadable
2
ACL Redirect URL
2
Redirect URL
VLAN assignment Per-user ACL
2
Per-user ACL Filter-Id attribute
2
Filter-Id attribute Downloadable
ACL
Downloadable
2
ACL Redirect URL
2
Redirect URL
2
2
Filter-Id attribute Filter-Id attribute
Downloadable ACL Downloadable
ACL
Redirect URL
Redirect URL
Proxy ACL Proxy ACL
2
Filter-Id attribute Filter-Id attribute
Downloadable Downloadable
2
ACL ACL
22
2
2
2
2
2
2
2
2
2
2
2
2
2
2
OL-21521-01