Cisco Catalyst 3750-E

10-8
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
OL-9775-08
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
Authentication Manager
In Cisco IOS Release 12.2(46)SE and earlier, you could not use the same authorization methods, including
CLI commands and messages, on this switch and also on other network devices, such as a Catalyst 6000.
You had to use separate authentication configurations. Cisco IOS Release 12.2(50)SE and later supports
the same authorization methods on all Catalyst switches in a network.
Cisco IOS Release 12.2(55)SE supports filtering verbose system messages from the authentication
ma
nager. For details, see the “Authentication Manager CLI Commands” section on page 10-9.
• Port-Based Authentication Methods, page 10-8
• Per-User ACLs and Filter-Ids, page 10-9
• Authentication Manager CLI Commands, page 10-9
Port-Based Authentication Methods
Ta b l e 10-1 802.1x Features
Authentication method
Mode
Single host Multiple host MDA
1
1. MDA = Multidomain authentication.
Multiple
Authentication
22
2. Also referred to as multiauth.
802.1x VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
3
Redirect URL
2
VLAN assignment VLAN assignment
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
MAC authentication bypass VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
AC
L
2
Redirect URL
2
VLAN assignment VLAN assignment
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Standalone web authentication
4
Proxy ACL, Filter-Id attribute, downloadable ACL
2
NAC Layer 2 IP validation Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable
ACL
2
Redirect URL
2
Web authentication as fallback
method
4
Proxy ACL
Filter-Id attribute
2
Downloadable
ACL
2
Proxy ACL
Filter-Id attribute
2
Downloadable
ACL
2
Proxy ACL
Filter-Id attribute
2
Downloadable
ACL
2
Proxy ACL
2
Filter-Id attribute
2
Downloadable
ACL
2