Cisco 1941 User Manual

155
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Configuring Identity Features on Layer 3 Interface
This chapter describes the identify features supported on the Onboard Gigabit Ethernet Layer 3 ports of
the Cisco 1921 Integrated Services Router (ISR).
This chapter contains the following sections:
• Authentication Methods, page 155
• Controlling Port Authorization State, page 159
• Flexible Authentication, page 162
• Host mode, page 162
• Open Access, page 162
• Control-Direction (Wake-on-LAN), page 163
• Preauthentication Access Control List, page 166
• Downloadable Access Control List, page 167
• Filter-ID or Named Access Control List, page 167
• IP Device Tracking, page 167
Note Critical authentication, which is also known as Inaccessible Authentication Bypass or AAA Fail Policy,
does not support the Identity features on the Onboard Gigabit Ethernet Layer 3 ports.
Authentication Methods
Identity features support various types of authentication methods that are suitable for different kinds of
end hosts and users. The two methods that are mainly used are:
• IEEE 802.1X
• MAC Authentication Bypass (MAB)
Configuring the IEEE 802.1X
Perform these steps to configure the IEEE 802.1X on the Cisco 1921 ISR.

Cisco 1941 Specifications

General

Product Type	Router
Product Series	1900
Model	1941
Connectivity Technology	Wired
Data Link Protocol	Ethernet, Fast Ethernet, Gigabit Ethernet
Flash Memory	256 MB
Power Supply	Internal power supply
Power	AC 120/230 V (50/60 Hz)
Operating System	Cisco IOS
Product Name	Cisco 1941
Form Factor	Rack-mountable
Network/Transport Protocol	IPSec, L2TP, PPPoE, PPPoA
Remote Management Protocol	SNMP, Telnet, SSH, HTTP, HTTPS
Features	Firewall protection, VPN support, VLAN support
Interfaces	2 x 10/100/1000Base-T Ethernet WAN, 2 x USB 2.0
Expansion Slots	2 x EHWIC 1 x ISM slot
Wireless LAN	No
RAM	512 MB (installed) / 768 MB (max)