Cisco 2911 Configuration Guide

159
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Configuring Identity Features on Layer 3 Interface
Controlling Port Authorization State
Domain: DATA
Oper host mode: single-host
Oper control dir: both
Authorized By: Authentication Server
Vlan Group: N/A
AAA Policies:
Session timeout: N/A
Idle timeout: N/A
Common Session ID: 0303030300000004002500A8
Acct Session ID: 0x00000007
Handle: 0x3D000005
Runnable methods list:
Method State
mab Authc Success
c1921#
Controlling Port Authorization State
You can control the port authorization by using the following methods:
• Force-authorized-This is the default setting that disables IEEE 802.1X and causes a port to transition
to the authorized state without any authentication exchange required. The port transmits and
receives normal traffic without IEEE 802.1X-based authentication of the client.
• Force-unauthorized-This causes a port to remain in the unauthorized state, ignoring all the
authentication attempts made by a client. A router cannot provide authentication services to clients
through the interface.
• Auto-This enables IEEE 802.1X authentication and causes a port to start in the unauthorized state,
allowing only Extensible Authentication Protocol over LAN (EAPoL) frames to be sent and received
through a port. The authentication process begins when the link state of the port transitions from
down to up, or when an EAPoL-start frame is received. The router requests the identity of the client
and begins relaying authentication messages between the client and the authentication server. Each
client attempting to access the network is uniquely identified by the router with the help of the
client's MAC address. If the client is successfully authenticated, the port state changes to authorized,
and all the frames from the authenticated client are allowed through the port. If authentication fails,
the port remains in the unauthorized state, but authentication can be retried.
Configuring the Controlling Port Authorization State
Perform these steps to configure the Controlling Port Authorization state.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface gigabitethernet slot / port
4. authentication port-control auto
5. mab
6. end

Cisco 2911 Specifications

General

Ethernet LAN	Yes
Cabling technology	10/100/1000Base-T(X)
Networking standards	IEEE 802.1Q, IEEE 802.1ag, IEEE 802.3, IEEE 802.3ab, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3u
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Ethernet interface type	Gigabit Ethernet
DHCP client	-
Routing protocols	BGP, EIGRP, OSPF
Supported protocols	IPv4, IPv6, IS-IS, IGMPv3, PIM SM, SSM, DVMRP, IPSec, GRE, BVD, MPLS, L2TPv3, PPP, MLPPP, MLFR, HDLC, RS-232, RS-449, X.21, V.35, EIA-530, PPPoE, ATM
USB version	2.0
RS-232 ports	1
Expansion slots	4 x EHWIC 2 x DSP 1 x ISM
USB ports quantity	2
Ethernet LAN (RJ-45) ports	3
Firewall security	Cisco IOS
Input current	2.2 A
AC input voltage	100 - 240 V
Power source type	AC
AC input frequency	47 - 63 Hz
Power consumption (typical)	50 W
Product color	Black
Rack capacity	2U
Operating altitude	0 - 4000 m
Non-operating altitude	0 - 4570 m
Storage temperature (T-T)	-40 - 80 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 95 %
Operating relative humidity (H-H)	5 - 85 %
Safety	UL 60950-1, CAN/CSA C22.2 No. 60950-1, EN 60950-1, AS/NZS 60950-1, IEC 60950-1
Electromagnetic compatibility	47 CFR, ICES-003, EN55022, CISPR22, AS/NZS 3548, VCCI V-3, EN 300-386, EN 61000, EN 55024, CISPR 24EN50082-1

Weight and Dimensions

Depth	304.8 mm
Width	438.2 mm
Height	88.9 mm
Weight	8200 g