Cisco Catalyst 3560-X

1-8
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
Port-Based Authentication Methods
Per-User ACLs and Filter-Ids
ACLs configured on the switch are compatible with other devices running Cisco IOS releases.
You can only set any as the source in the ACL.
Note For any ACL configured for multiple-host mode, the source portion of statement must be any. (For
example, permit icmp any host 10.10.1.1.)
Table 1-1 802.1x Features
Authentication method
Mode
Single host Multiple host MDA
1
1. MDA = Multidomain authentication.
Multiple
Authentication
22
2. Also referred to as multiauth.
802.1x VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
3
Redirect URL
2
3. Supported in Cisco IOS Release 12.2(50)SE and later.
VLAN assignment VLAN assignment
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
MAC authentication bypass VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
2
Redirect URL
2
VLAN assignment VLAN assignment
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Standalone web authentication
4
Proxy ACL, Filter-Id attribute, downloadable ACL
2
NAC Layer 2 IP validation Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Web authentication as fallback
method
4
4. For clients that do not support 802.1x authentication.
Proxy ACL
Filter-Id attribute
2
Downloadable
ACL
2
Proxy ACL
Filter-Id attribute
2
Downloadable
ACL
2
Proxy ACL
Filter-Id attribute
2
Downloadable
ACL
2
Proxy ACL
2
Filter-Id attribute
2
Downloadable
ACL
2