Cisco Catalyst 3560-X User Manual

1-25
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
RADIUS servers and new hosts cannot be authenticated, the switch connects those hosts to critical ports.
A new host trying to connect to the critical port is moved to a user-specified access VLAN, the critical
VLAN, and granted limited authentication.
With this release, you can enter the authentication event server dead action authorize voice interface
configuration command to configure the critical voice VLAN feature. When the ACS does not respond,
the port goes into critical authentication mode. When traffic coming from the host is tagged with the
voice VLAN, the connected device (the phone) is put in the configured voice VLAN for the port. The IP
phones learn the voice VLAN identification through CDP (Cisco devices) or through LLDP or DHCP.
You can configure the voice VLAN for a port by entering the switchport voice vlan vlan-id interface
configuration command.
This feature is supported in multidomain and multi-auth host modes. Although you can enter the
command when the switch in single-host or multi-host mode, the command has no effect unless the
device changes to multidomain or multi-auth host mode.
Beginning in privileged EXEC mode, follow these steps to configure critical voice VLAN on a port and
enable the inaccessible authentication bypass feature.
Command Purpose
Step 1
configure terminal Enters global configuration mode.
Step 2
radius-server dead-criteria
time time tries tries
Sets the conditions that are used to decide when a RADIUS server is considered un-
available or down (dead).
• The range for time is from 1 to 120 seconds. The switch dynamically determines
a default seconds value between 10 and 60 seconds.
• The range for tries is from 1 to 100. The switch dynamically determines a default
tries parameter between 10 and 100.
Step 3
radius-server deadtime
minutes
(Optional) Sets the number of minutes during which a RADIUS server is not sent
requests. The range is from 0 to 1440 minutes (24 hours). The default is 0 minutes.

Cisco Catalyst 3560-X Specifications

General

Enclosure Type	Rack-mountable - 1U
Subtype	Gigabit Ethernet
Ports	48 x 10/100/1000 + 4 x SFP
Flash Memory	64 MB
Power Device	Internal power supply
Voltage Required	AC 120/230 V (50/60 Hz)
Operating System	Cisco IOS
Device Type	Switch
Performance	Switching capacity: 128 Gbps
Jumbo Frame Support	Yes
Routing Protocol	RIP-1, RIP-2, EIGRP
Remote Management Protocol	SNMP 1, RMON 1, RMON 2, RMON 3, RMON 9, Telnet, SNMP 3, HTTP, HTTPS
Features	DHCP support, VLAN support, QoS, IPv6 support, Syslog
Compliant Standards	IEEE 802.3, IEEE 802.3u, IEEE 802.3z, IEEE 802.1D, IEEE 802.1Q, IEEE 802.3ab, IEEE 802.1p, IEEE 802.3af, IEEE 802.3x, IEEE 802.3ad, IEEE 802.1w, IEEE 802.1x, IEEE 802.1s, IEEE 802.3ah, IEEE 802.1ag, IEEE 802.3at
Stacking	Stackable
Security Features	SSH, RADIUS, TACACS+
Management	CLI
Dimensions (H x W x D)	17.5 in
Operating Temperature	32 to 113 °F (0 to 45 °C)
Humidity	10 - 95% (non-condensing)