Cisco Catalyst 4500 Series Software Configuration Guide

54-2
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 54 Auto Identity
Information About Auto Identity
Auto Identity Overview
The Cisco Identity-Based Networking Services (IBNS) solution provides a policy and identity-based
framework in which edge devices can deliver flexible and scalable services to subscribers. IBNS allows
the concurrent operation of IEEE 802.1x (dot1x), MAC authentication bypass (MAB), and web
authentication methods, making it possible to invoke multiple authentication methods in parallel, on a
single subscriber session. These authentication methods, dot1x, authentication, authorization, and
accounting (AAA), and RADIUS are available in global configuration and interface configuration
modes.
The Auto Identity feature uses the Cisco Common Classification Policy Language-based configuration
that significantly reduces the number of commands used to configure both authentication methods and
interface-level commands. The Auto Identity feature provides a set of built-in policies that are based on
policy maps, class maps, parameter maps, and interface templates.
In global configuration mode, the source template AI_GLOBAL_CONFIG_TEMPLATE command
enables the Auto Identity feature. In interface configuration mode, configure the
AI_MONITOR_MODE, AI_LOW_IMPACT_MODE, or AI_CLOSED_MODE interface templates
to enable the feature on interfaces.
You can configure multiple templates; however, you must bind multiple templates together using the
merge command. If you do not bind the templates, the last configured template is used. While binding
templates, if the same command is repeated in two templates with different arguments, the last
configured command is used.
Note You can also enable user-defined templates that are configured using the template name command in
global configuration mode.
Use the show template interface or show template global commands to display information about
built-in templates.
Built-in templates can be edited. Built-in template information is displayed in the output of the show
running-config command, if the template is edited. If you delete an edited built-in template, the built-in
template reverts to the default and is not deleted from the configuration. However; if you delete a
user-defined template, it is deleted from the configuration.
Note Before you delete a template, ensure that it is not attached to a device.
Auto Identity Global Template
To enable the global template, configure the source template template-name command in global
configuration mode.
Note You must configure the RADIUS server commands, because these are not automatically configured
when the global template is enabled.
The following example shows how to enable the global template:
Switch(config)# source template AI_GLOBAL_CONFIG_TEMPLATE
Switch(config)# radius server ISE
Switch(config-radius-server)# address ipv4 172.20.254.4 auth-port 1645 acct-port 1646
Switch(config-radius-server)# key cisco

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E