Cisco Catalyst 4500 Series Software Configuration Guide

49-27
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 49 Configuring 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
These sections describe how to configure 802.1X:
• Default 802.1X Configuration, page 49-27
• 802.1X Configuration Guidelines, page 49-28
• Enabling 802.1X Authentication, page 49-29 (required)
• Configuring Switch-to-RADIUS-Server Communication, page 49-32 (required)
• Configuring Multiple Domain Authentication and Multiple Authorization, page 49-34
• Configuring Limiting Login for Users, page 49-38
• Configuring 802.1X Authentication with ACL Assignments and Redirect URLs, page 49-38
• Configuring 802.1X Authentication with Per-User ACL and Filter-ID ACL, page 49-45
• Configuring RADIUS-Provided Session Timeouts, page 49-53 (optional)
• Configuring MAC Move, page 49-55 (optional)
• Configuring MAC Replace, page 49-56 (optional)
• Configuring Violation Action, page 49-56 (optional)
• Configuring 802.1X with Guest VLANs, page 49-57 (optional)
• Configuring 802.1X with MAC Authentication Bypass, page 49-60 (optional)
• Configuring 802.1X with Inaccessible Authentication Bypass, page 49-62 (optional)
• Configuring 802.1X with Unidirectional Controlled Port, page 49-66 (optional)
• Configuring 802.1X with VLAN User Distribution, page 49-68
• Configuring 802.1X with Authentication Failed, page 49-71 (optional)
• Configuring 802.1X with Voice VLAN, page 49-73 (optional)
• Configuring Voice Aware 802.1x Security, page 49-74
• Configuring 802.1X with VLAN Assignment, page 49-75
• Enabling Fallback Authentication, page 49-77
• Enabling Periodic Reauthentication, page 49-81 (optional)
• Enabling Multiple Hosts, page 49-83 (optional
• Changing the Quiet Period, page 49-84 (optional)
• Changing the Switch-to-Client Retransmission Time, page 49-85 (optional)
• Setting the Switch-to-Client Frame-Retransmission Number, page 49-86 (optional)
• Configuring an Authenticator and a Supplicant Switch with NEAT, page 49-88
• Manually Reauthenticating a Client Connected to a Port, page 49-94 (optional)
• Initializing the 802.1X Authentication State, page 49-94
• Removing 802.1X Client Information, page 49-95
• Resetting the 802.1X Configuration to the Default Values, page 49-95 (optional)
Default 802.1X Configuration
Table 49-1 shows the default 802.1X configuration.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E