Port-Based Authentication and Switch Stacks 271
802.1x Host Mode 272
802.1x Multiple Authentication Mode 273
Multi-auth Per User VLAN assignment 273
Limitation in Multi-auth Per User VLAN assignment 274
MAC Move 275
MAC Replace 275
802.1x Accounting 276
802.1x Accounting Attribute-Value Pairs 276
802.1x Readiness Check 277
Switch-to-RADIUS-Server Communication 278
802.1x Authentication with VLAN Assignment 278
802.1x Authentication with Per-User ACLs 280
802.1x Authentication with Downloadable ACLs and Redirect URLs 281
Cisco Secure ACS and Attribute-Value Pairs for the Redirect URL 282
Cisco Secure ACS and Attribute-Value Pairs for Downloadable ACLs 282
VLAN ID-based MAC Authentication 283
802.1x Authentication with Guest VLAN 283
802.1x Authentication with Restricted VLAN 284
802.1x Authentication with Inaccessible Authentication Bypass 285
Inaccessible Authentication Bypass Support on Multiple-Authentication Ports 285
Inaccessible Authentication Bypass Authentication Results 286
Inaccessible Authentication Bypass Feature Interactions 286
802.1x Critical Voice VLAN 287
802.1x User Distribution 287
802.1x User Distribution Configuration Guidelines 288
IEEE 802.1x Authentication with Voice VLAN Ports 288
IEEE 802.1x Authentication with Port Security 289
IEEE 802.1x Authentication with Wake-on-LAN 289
IEEE 802.1x Authentication with MAC Authentication Bypass 290
Network Admission Control Layer 2 IEEE 802.1x Validation 291
Flexible Authentication Ordering 291
Open1x Authentication 292
Multidomain Authentication 292
Limiting Login for Users 294
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 xiii
Contents