Cisco Catalyst 4500 Series Administration Guide

46-70
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL_28731-01
Chapter 46 Configuring 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
Configuring 802.1X with VLAN User Distribution
You will need to configure the switch and ACS to configure 802.1X with VLAN user distribution.
Configuring the Switch
To configure the switch, follow these steps:
Step 1 Create a VLAN group on the switch.
Enter the following commands to create a VLAN group and assign some VLANs to the VLAN group.
The following example creates the VLAN group eng-group and maps VLANs 20 to 24 to that group:
Switch# configure terminal
Switch(config)# vlan group eng-group vlan-list 20-24
Switch(config)# end
Switch# show vlan group group-name eng-group
Group Name VLANs Mapped
---------------- -------------------
eng-group 20-24
Note Ensure that the VLANs you specify as part of the VLAN group are enabled on the switch. Only specified
VLANs are considered for assignment.
Step 2 Configure the individual ports for multidomain, single-host or multiple- host.
For details, refer to the “Enabling 802.1X Authentication” section on page 46-31.
show commands
Use the following show commands to display the member VLANs in a VLAN group:
The following examples show outputs of the show vlan group command:
show command Purpose
show vlan group all
Displays the member VLANs for all the VLAN
groups configured on the device.
show vlan group group-name vlan-group-name
Displays the member VLANs in a VLAN group
with the given VLAN group name.
show vlan group group-name vlan-group-name
user-count
Displays the user count for each of the member
VLANs of the specified VLAN group
This feature counts only authenticated users and
MAC addresses added through port security for
distribution. It does not consider other learned
MAC addresses. As of Cisco IOS Release
12.2(54)SG, the user count for a VLAN is
incremented when a host is learned through port
security, 802.1X, MAB, or fallback authentication
on that VLAN.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E