IEEE 802.1x Authentication with Voice VLAN Ports 236
IEEE 802.1x Authentication with Port Security 237
IEEE 802.1x Authentication with Wake-on-LAN 237
IEEE 802.1x Authentication with MAC Authentication Bypass 238
Network Admission Control Layer 2 IEEE 802.1x Validation 239
Flexible Authentication Ordering 239
Open1x Authentication 239
Multidomain Authentication 240
802.1x Supplicant and Authenticator Switches with Network Edge Access Topology
(NEAT) 241
Voice Aware 802.1x Security 242
Common Session ID 243
How to Configure 802.1x Port-Based Authentication 243
Default 802.1x Authentication Configuration 243
802.1x Authentication Configuration Guidelines 245
802.1x Authentication 245
VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication
Bypass 246
MAC Authentication Bypass 247
Maximum Number of Allowed Devices Per Port 247
Configuring 802.1x Readiness Check 247
Configuring Voice Aware 802.1x Security 248
Configuring 802.1x Violation Modes 250
Configuring 802.1x Authentication 252
Configuring 802.1x Port-Based Authentication 253
Configuring the Switch-to-RADIUS-Server Communication 255
Configuring the Host Mode 257
Configuring Periodic Re-Authentication 258
Changing the Quiet Period 259
Changing the Switch-to-Client Retransmission Time 261
Setting the Switch-to-Client Frame-Retransmission Number 262
Setting the Re-Authentication Number 263
Enabling MAC Move 264
Enabling MAC Replace 266
Configuring 802.1x Accounting 267
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 xiii
Contents