Cisco Catalyst 3750-E User Manual

11-8
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
OL-9775-08
Chapter 11 Configuring Web-Based Authentication
Understanding Web-Based Authentication
LAN Port IP
You can configure LAN port IP (LPIP) and Layer 2 web-based authentication on the same port. The host
is authenticated by using web-based authentication first, followed by LPIP posture validation. The LPIP
host policy overrides the web-based authentication host policy.
If the web-based authentication idle timer expires, the NAC policy is removed. The host is authenticated,
an
d posture is validated again.
Gateway IP
You cannot configure Gateway IP (GWIP) on a Layer 3 VLAN interface if web-based authentication is
configured on any of the switch ports in the VLAN.
You can configure web-based authentication on the same Layer 3 interface as Gateway IP. The host
pol
icies for both features are applied in software. The GWIP policy overrides the web-based
authentication host policy.
ACLs
If you configure a VLAN ACL or a Cisco IOS ACL on an interface, the ACL is applied to the host traffic
only after the web-based authentication host policy is applied.
For Layer 2 web-based authentication, you must configure a port ACL (PACL) as the default access
p
olicy for ingress traffic from hosts connected to the port. After authentication, the web-based
authentication host policy overrides the PACL.
You cannot configure a MAC ACL and web-based authentication on the same interface.
You cannot configure web-based authentication on a port whose access VLAN is configured for VACL
ca
pture.
Context-Based Access Control
Web-based authentication cannot be configured on a Layer 2 port if context-based access control
(CBAC) is configured on the Layer 3 VLAN interface of the port VLAN.
802.1x Authentication
You cannot configure web-based authentication on the same port as 802.1x authentication except as a
fallback authentication method.
EtherChannel
You can configure web-based authentication on a Layer 2 EtherChannel interface. The web-based
authentication configuration applies to all member channels.

Cisco Catalyst 3750-E Specifications

General

Series	Catalyst 3750-E
Switching Capacity	32 Gbps
Stacking Bandwidth	32 Gbps
StackWise Plus	Yes
Layer Support	Layer 3
MAC Address Table Size	12, 000 entries
RAM	256 MB
Flash Memory	64 MB
Memory	256 MB DRAM, 64 MB Flash
Operating Temperature	32 to 113°F (0 to 45°C)
Ports	48 10/100/1000 Ethernet ports
Form Factor	Rack-mountable
Jumbo Frame Support	Yes
Input Voltage	100 to 240 VAC
Storage Temperature	-25 to 70 °C
Relative Humidity	10 to 90% non-condensing