Cisco Catalyst 4500 Series Administration Guide

46-57
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 46 Configuring 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
Dot1x Authenticator Client List Empty
Port Status = AUTHORIZED
Switch#
Configuring MAC Move
MAC move allows an authenticated host to move from one switch port to another.
Note You should remove port security before configuring MAC move.
To globally enable MAC move on the switch, perform this task:
This example shows how to globally enable MAC move on a switch:
Switch# configure terminal
Switch(config)# authentication mac-move permit
The following syslog messages displays when MAC-move happens:
%AUTHMGR-5-SECUREMACMOVE: <mac-addr> moved from <interface-name> to <interface-name>
Configuring MAC Replace
MAC replace allows new users to connect to abandoned ports.
If a user disconnects but the switch has not received the EAPoL-Logoff, the session will remain up. For
single or multiple- domain modes, no new hosts can connect to that port. If a new host tries to connect,
a violation is triggered on the port. Where the violation action is configured as replace, the desired
behavior is for the NAD (switch) to terminate the initial session and reset the authentication sequence
based on the new MAC.
To enable MAC replace on a switch, perform this task:
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# authentication
mac-move permit
Enable MAC move globally.
Step 3
Switch(config-if)# end
Returns to privileged EXEC mode.
Step 4
Switch# show run
Verifies your entries.
Step 5
Switch # copy running-config
startup-config
(Optional) Saves your entries in the configuration file.
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# interface
interface-id
Enters interface configuration mode.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E