Cisco Catalyst 3850 Guide

Access Control on the Wired Network
LAN Access Switch Topology with IEEE 802.1x Secure Access Control
67
Best Practice User Guide for the Catalyst 3850 and Catalyst 3650 Switch Series
LAN Access Switch Topology with IEEE 802.1x Secure Access
Control
Figure 9 LAN Access Switch Topology with IEEE 802.1x Secure Access Control
Securing Access Using 802.1x on a wired LAN
The following tasks are to be performed in the same order that is listed here.
• Recommendations for Configuring Security on a Wired LAN
• Provision Common Wired Security Access
• Provision in Monitor Mode
• Provision in Low-Impact Mode
• Provision in High-Impact Mode
•
Recommendations for Configuring Security on a Wired LAN
IEEE 802.1x permits or denies network connectivity based on the identity of users and devices. It
provides a link between the user name and IP address, MAC address, and a port on a switch. It also
provides customized network access based on the identity of the end device or user.
The main components of IEEE 802.1x are:
• Supplicant (end device)
• Authenticator (switch)
• Authentication server (RADIUS or ISE)
Desktop user
direct connect
Desktop user
Printer
Catalyst 3850 stack in access
Voice VLAN 11
Data VLAN 10
Data VLAN 10
Switch management
VLAN 100
391703
Data VLAN 10
Authentication
Server

Cisco Catalyst 3850 Specifications

General

Stacking Bandwidth	480 Gbps
Max Stacking Units	9
Form Factor	Rack-mountable
RAM	4 GB
Flash Memory	4 GB
Operating System	Cisco IOS XE
Model	Catalyst 3850
Ports	24 or 48 Gigabit Ethernet ports
Uplink Interfaces	4 x 1GE, 2 x 10GE, or 4 x 10GE
Power Supply	Redundant power supplies
Dimensions	44.5 x 44.8 x 4.45 cm
Weight	7.6 kg
Features	IPv6
Power over Ethernet (PoE)	PoE, PoE+, UPOE (varies by model)
Operating Temperature	0 to 40°C