Cisco Catalyst 4500 Series Software Configuration Guide

49-115
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 49 Configuring 802.1X Port-Based Authentication
Configuring Device Sensor
Configuring RADIUS Server Load Balancing
This feature allows access and authentication requests to be evenly across all RADIUS servers in a server group. For more
information, see the RADIUS Server Load Balancing chapter of the Cisco IOS Security Configuration Guide, Release 12.2:
http://www.ciscosystems.com/en/US/docs/ios/12_2sb/feature/guide/sbrdldbl.html
Displaying the RADIUS Configuration
To display the RADIUS configuration, use the show running-config privileged EXEC command.
Configuring Device Sensor
This section includes the following:
• About Device Sensor, page 49-115
• MSP-IOS Sensor Device Classifier Interaction, page 49-116
• Configuring Device Sensor, page 49-117
• Configuration Examples for the Device Sensor Feature, page 49-122
About Device Sensor
Device Sensor uses protocols such as Cisco Discovery Protocol (CDP), Link Layer Discovery Protocol (LLDP), and DHCP to
obtain endpoint information from network devices and make this information available to its clients. Device Sensor has internal
clients, such as the embedded Device Classifier (local analyzer), Auto Smartports (ASP), MediaNet Service Interface Media
Services Proxy, and EnergyWise. Device Sensor also has an external client, Identity Services Engine (ISE), which uses
RADIUS accounting to receive and analyze endpoint data. When integrated with ISE, Device Sensor provides central policy
management and device-profiling capabilities.
Note Cisco Identity Services Engine (ISE) based profiling is not supported on the LAN Base image.
Device profiling capability consists of two parts:
• Collector--Gathers endpoint data from network devices.
• Analyzer--Processes the data and determines the type of device.
For more information on device profiling, see the “Configuring Endpoint Profiling Policies” chapter in the Cisco Identity
Services Engine User Guide at this URL:
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_prof_pol.html
Device Sensor represents the embedded collector functionality. Figure 19 shows a Device Sensor in the context of its internal
clients and the ISE.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E