Contents
xii
Cisco IE 3000 Switch Software Configuration Guide
OL-13018-03
802.1x Authentication 12-29
VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication
Bypass 12-29
MAC Authentication Bypass 12-30
Maximum Number of Allowed Devices Per Port 12-30
Configuring 802.1x Readiness Check 12-31
Configuring 802.1x Violation Modes 12-32
Configuring 802.1x Authentication 12-32
Configuring the Switch-to-RADIUS-Server Communication 12-34
Configuring the Host Mode 12-35
Configuring Periodic Re-Authentication 12-37
Manually Re-Authenticating a Client Connected to a Port 12-38
Changing the Quiet Period 12-38
Changing the Switch-to-Client Retransmission Time 12-39
Setting the Switch-to-Client Frame-Retransmission Number 12-39
Setting the Re-Authentication Number 12-40
Configuring 802.1x Accounting 12-41
Configuring a Guest VLAN 12-42
Configuring a Restricted VLAN 12-43
Configuring the Inaccessible Authentication Bypass Feature 12-45
Configuring 802.1x Authentication with WoL 12-47
Configuring MAC Authentication Bypass 12-48
Configuring NAC Layer 2 802.1x Validation 12-49
Configuring 802.1x Switch Supplicant with NEAT 12-50
Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs 12-52
Configuring Downloadable ACLs 12-52
Configuring a Downloadable Policy 12-53
Configuring Flexible Authentication Ordering 12-54
Configuring Open1x 12-55
Configuring Web Authentication 12-55
Disabling 802.1x Authentication on the Port 12-58
Resetting the 802.1x Authentication Configuration to the Default Values 12-59
Displaying 802.1x Statistics and Status 12-59
CHAPTER
13 Configuring Interface Characteristics 13-1
Understanding Interface Types 13-1
Port-Based VLANs 13-2
Switch Ports 13-2
Access Ports 13-2
Trunk Ports 13-3