Configuring 802.1x User Distribution 335
Example of Configuring VLAN Groups 336
Configuring NAC Layer 2 802.1x Validation 337
Configuring Limiting Login for Users 339
Configuring an Authenticator Switch with NEAT 340
Configuring a Supplicant Switch with NEAT 342
Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs 345
Configuring Downloadable ACLs 345
Configuring a Downloadable Policy 347
Configuring VLAN ID-based MAC Authentication 350
Configuring Flexible Authentication Ordering 350
Configuring Open1x 352
Disabling 802.1x Authentication on the Port 354
Resetting the 802.1x Authentication Configuration to the Default Values 355
Monitoring 802.1x Statistics and Status 356
Additional References 357
Feature Information for 802.1x Port-Based Authentication 358
CHAPTER 16
Configuring Web-Based Authentication 359
Finding Feature Information 359
Web-Based Authentication Overview 359
Device Roles 360
Host Detection 361
Session Creation 361
Authentication Process 362
Local Web Authentication Banner 362
Web Authentication Customizable Web Pages 365
Guidelines 365
Authentication Proxy Web Page Guidelines 367
Redirection URL for Successful Login Guidelines 368
Web-based Authentication Interactions with Other Features 368
Port Security 368
LAN Port IP 368
Gateway IP 369
ACLs 369
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 xv
Contents