Licensing Requirements for 802.1X
The following table shows the licensing requirements for this feature:
License RequirementProduct
802.1X requires no license. Any feature not included in a license package is bundled with the
Cisco NX-OS system images and is provided at no extra charge to you.
Cisco
NX-OS
Prerequisites for 802.1X
• Cisco Nexus Release 7.0(3)I7(1) software.
802.1X Guidelines and Limitations
802.1X port-based authentication has the following configuration guidelines and limitations:
• When you upgrade the Cisco Nexus Series switch to Cisco NX-OS Release 9.2(1) using the
(dispruptive/non-disruptive) In-Service Software Upgrades (ISSU), you must first the disable 802.1x
using the no feature dot1x command and then enable it using the feature dot1x commandfor
mutli-authentication to work.
• Beginning with Cisco NX-OS Release 9.2(1), multi-authentication mode is enabled on an 802.1X port.
VLAN assignment occurs successfully for the first authenticated host. Subsequent authorized (based on
user credentials) data hosts are considered successfully authenticated, provided either they have no VLAN
assignment or have a VLAN assignment matching the first successfully authenticated host on the port.
This ensures that all successfully authenticated hosts on a port are members of the same VLAN. Flexibility
of VLAN assignment is only provided to the first authenticated host.
• Cisco Nexus Series switches do not support 802.1X on the following:
• Transit topology set UPS
• FEX ports
• VPC ports
• PVLAN ports
• L3 (routed) ports
• Port security
• Ports enabled with CTS and MACsec.
• Dot1x with LACP port-channels.
Dot1x supports static port-channels.
Note
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
183
Configuring 802.1X
Licensing Requirements for 802.1X
To Next Page
Loading...
