ModeAuthentication method
Multiple
Authentication
MDAMultiple hostSingle host
VLAN
assignment
Per-user ACL
Filter-Id attribute
Downloadable
ACL
Redirect URL
VLAN
assignment
Per-user ACL
Filter-Id attribute
Downloadable
ACL
Redirect URL
VLAN
assignment
VLAN
assignment
Per-user ACL
Filter-ID
attribute
Downloadable
ACL
Redirect URL
MAC authentication bypass
Proxy ACL, Filter-Id attribute, downloadable ACLStandalone web authentication
Filter-Id attribute
Downloadable
ACL
Redirect URL
Filter-Id attribute
Downloadable
ACL
Redirect URL
Filter-Id attribute
Downloadable
ACL
Redirect URL
Filter-Id attribute
Downloadable
ACL
Redirect URL
NAC Layer 2 IP validation
Proxy ACL
Filter-Id attribute
Downloadable
ACL
Proxy ACL
Filter-Id attribute
Downloadable
ACL
Proxy ACL
Filter-Id attribute
Downloadable
ACL
Proxy ACL
Filter-Id attribute
Downloadable
ACL
Web authentication as fallback
method
16
15
Supported in Cisco IOS Release 12.2(50)SE and later.
16
For clients that do not support 802.1x authentication.
Per-User ACLs and Filter-Ids
You can only set any as the source in the ACL.Note
For any ACL configured for multiple-host mode, the source portion of statement must be any. (For example,
permit icmp any host 10.10.1.1.)
Note
You must specify any in the source ports of any defined ACL. Otherwise, the ACL cannot be applied and
authorization fails. Single host is the only exception to support backward compatibility.
More than one host can be authenticated on MDA-enabled and multiauth ports. The ACL policy applied for
one host does not effect the traffic of another host. If only one host is authenticated on a multi-host port, and
the other hosts gain network access without authentication, the ACL policy for the first host can be applied
to the other connected hosts by specifying any in the source address.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1324
Information About 802.1x Port-Based Authentication
To Next Page
Loading...
Need help?
General
