Cisco SF500-24 - 802.1 X Parameters Workflow; Defining 802.1 X Properties

Security
Configuring 802.1X
397 Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3
20
The device also uses the Guest VLAN for the authentication process at ports
configured with Multiple Session mode and MAC-based authentication. Therefore,
you must configure a Guest VLAN before you can use the MAC authentication
mode.
802.1X Parameters Workflow
Define the 802.1X parameters as follows:
• Optional) Set a time range(s) using the Time Range and Recurring Range
pages. These are used in the Edit Port Authentication page.
• (Optional) Define one or more static VLANs as unauthenticated VLANs as
described in the Defining 802.1X Properties section. 802.1x authorized
and unauthorized devices or ports can always send or receive packets to or
from unauthenticated VLANs.
• Define 802.1X settings for each port by using the Edit Port Authentication
page.
Note the following:
• On this page, DVA can be activated on a port by selecting the RADIUS
VLAN Assignment field.
• You can select the Guest VLAN field to have untagged incoming frames go
to the guest VLAN.
• Define host authentication parameters for each port using the Port
Authentication page.
• View 802.1X authentication history using the Authenticated Hosts page.
Defining 802.1X Properties
The 802.1X Properties page is used to globally enable 802.1X and define how
ports are authenticated. For 802.1X to function, it must be activated both globally
and individually on each port.
To define port-based authentication:
STEP 1 Click Security > 802.1X > Properties.
STEP 2 Enter the parameters.