Contents
xxxiii
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Multiple-Hosts Mode 44-7
Multidomain Authentication Mode 44-7
Multiauthentication Mode 44-8
Pre-authentication Open Access 44-8
802.1X Violation Mode 44-8
Using MAC Move 44-9
Using MAC Replace 44-9
Using 802.1X with VLAN Assignment 44-10
Using 802.1X for Guest VLANs 44-11
Usage Guidelines for Using 802.1X Authentication with Guest VLANs 44-11
Usage Guidelines for Using 802.1X Authentication with Guest VLANs on Windows-XP
Hosts 44-12
Using 802.1X with MAC Authentication Bypass 44-12
Feature Interaction 44-13
Using 802.1X with Web-Based Authentication 44-14
Using 802.1X with Inaccessible Authentication Bypass 44-14
Using 802.1X with Unidirectional Controlled Port 44-15
Unidirectional State 44-16
Bidirectional State 44-16
Using 802.1X with VLAN User Distribution 44-16
Deployment Example 44-17
Using 802.1X with Authentication Failed VLAN Assignment 44-17
Usage Guidelines for Using Authentication Failed VLAN Assignment 44-18
Using 802.1X with Port Security 44-19
Using 802.1X Authentication with ACL Assignments and Redirect URLs 44-20
Cisco Secure ACS and AV Pairs for URL-Redirect 44-20
ACLs 44-21
Using 802.1X with RADIUS-Provided Session Timeouts 44-21
Using 802.1X with Voice VLAN Ports 44-22
Using Multiple Domain Authentication and Multiple Authentication 44-22
802.1X Supplicant and Authenticator Switches with Network Edge Access Topology 44-24
Deployment 44-24
How 802.1X Fails on a Port 44-25
Supported Topologies 44-25
Configuring 802.1X Port-Based Authentication 44-26
Default 802.1X Configuration 44-27
802.1X Configuration Guidelines 44-28
Enabling 802.1X Authentication 44-28
Configuring Switch-to-RADIUS-Server Communication 44-32
Configuring Multiple Domain Authentication and Multiple Authorization 44-34