Contents
41
Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex
Multiauthentication Mode 49-8
Pre-authentication Open Access 49-8
802.1X Violation Mode 49-8
Using MAC Move 49-9
Using MAC Replace 49-9
Using 802.1X with VLAN Assignment 49-9
Using 802.1X for Guest VLANs 49-10
Usage Guidelines for Using 802.1X Authentication with Guest VLANs 49-11
Usage Guidelines for Using 802.1X Authentication with Guest VLANs on Windows-XP
Hosts
49-11
Using 802.1X with MAC Authentication Bypass 49-11
Feature Interaction 49-12
Using 802.1X with Web-Based Authentication 49-13
Using 802.1X with Inaccessible Authentication Bypass 49-14
Using 802.1X with Unidirectional Controlled Port 49-15
Unidirectional State 49-15
Bidirectional State 49-15
Using 802.1X with VLAN User Distribution 49-15
Deployment Example 49-16
Using 802.1X with Authentication Failed VLAN Assignment 49-16
Usage Guidelines for Using Authentication Failed VLAN Assignment 49-17
Using 802.1X with Port Security 49-18
Using 802.1X Authentication with ACL Assignments and Redirect URLs 49-19
Cisco Secure ACS and AV Pairs for URL-Redirect 49-19
ACLs 49-20
Using 802.1X with RADIUS-Provided Session Timeouts 49-20
Using 802.1X with Voice VLAN Ports 49-21
Using Voice Aware 802.1x Security 49-21
Using Multiple Domain Authentication and Multiple Authentication 49-22
Multi-Authentication Per User VLAN Authentication 49-23
Limitation in Multi-Authentication Per User VLAN Assignment 49-24
Limiting Login for Users 49-24
802.1X Supplicant and Authenticator Switches with Network Edge Access Topology 49-24
Deployment 49-24
How 802.1X Fails on a Port 49-25
Supported Topologies 49-26
Configuring 802.1X Port-Based Authentication 49-26
Default 802.1X Configuration 49-27
802.1X Configuration Guidelines 49-28
Enabling 802.1X Authentication 49-29