Security: 802.1X Authentication
Overview
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 355
18
After authentication is completed, the switch forwards all traffic arriving from the client on the
port, as shown in the figure below.
Figure 3 WEB-Based Authentication
Web-based authentication cannot be configured on a port that has the guest VLAN or
RADIUS-Assigned VLAN feature enabled.
Web-based authentication supports the following pages:
• Login page
• Login Success page
There is a predefined, embedded set of these pages.
These pages can be modified in the WEB-Based Authentication page.
You can preview each of the customized pages. The configuration is saved into the Running
Configuration file.
Unauthenticated VLANs and the Guest VLAN
Unauthenticated VLANs and the guest VLAN provide access to services that do not require
the supplicant devices or ports to be authenticated and authorized.
The guest VLAN is the VLAN that is assigned to an unauthorized client. You can configure
the guest VLAN and one or more VLANs to be unauthenticated in the Properties page.
An unauthenticated VLAN is a VLAN that allows access by both authorized and unauthorized
devices or ports.
An unauthenticated VLAN has the following characteristics:
• It must be a static VLAN, and cannot be the guest VLAN or the default VLAN.
• The member ports must be manually configured as tagged members.
• The member ports must be trunk and/or general ports. An access port cannot be
member of an unauthenticated VLAN.
Client Authenticaticator
HTTP
RADIUS Protocol
Authentication
Server
EAP Protocol
370577
To Next Page
Loading...
Need help?
General
