155
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Configuring Identity Features on Layer 3 Interface
This chapter describes the identify features supported on the Onboard Gigabit Ethernet Layer 3 ports of
the Cisco 1921 Integrated Services Router (ISR).
This chapter contains the following sections:
• Authentication Methods, page 155
• Controlling Port Authorization State, page 159
• Flexible Authentication, page 162
• Host mode, page 162
• Open Access, page 162
• Control-Direction (Wake-on-LAN), page 163
• Preauthentication Access Control List, page 166
• Downloadable Access Control List, page 167
• Filter-ID or Named Access Control List, page 167
• IP Device Tracking, page 167
Note Critical authentication, which is also known as Inaccessible Authentication Bypass or AAA Fail Policy,
does not support the Identity features on the Onboard Gigabit Ethernet Layer 3 ports.
Authentication Methods
Identity features support various types of authentication methods that are suitable for different kinds of
end hosts and users. The two methods that are mainly used are:
• IEEE 802.1X
• MAC Authentication Bypass (MAB)
Configuring the IEEE 802.1X
Perform these steps to configure the IEEE 802.1X on the Cisco 1921 ISR.
To Next Page
Loading...
