iii
Verifying the configuration ··································································································································· 96
802.1X with ACL assignment configuration example ······························································································· 96
Network requirements ··········································································································································· 96
Configuration procedure ······································································································································ 97
Verifying the configuration ··································································································································· 97
Configuring EAD fast deployment ···························································································································· 99
Overview ········································································································································································· 99
Free IP ····································································································································································· 99
URL redirection ······················································································································································· 99
Configuration prerequisites ··········································································································································· 99
Configuring a free IP ····················································································································································· 99
Configuring the redirect URL ······································································································································· 100
Setting the EAD rule timer ··········································································································································· 100
Displaying and maintaining EAD fast deployment ··································································································· 100
EAD fast deployment configuration example ············································································································ 101
Network requirements ········································································································································· 101
Configuration procedure ···································································································································· 102
Verifying the configuration ································································································································· 102
Troubleshooting EAD fast deployment ······················································································································· 103
Web browser users cannot be correctly redirected ························································································ 103
Configuring MAC authentication ··························································································································· 104
Overview ······································································································································································· 104
User account policies ·········································································································································· 104
Authentication approaches ································································································································ 104
MAC authentication timers ································································································································· 105
Using MAC authentication with other features ········································································································· 105
VLAN assignment ················································································································································ 105
ACL assignment ··················································································································································· 105
Guest VLAN ························································································································································· 105
Critical VLAN ······················································································································································· 106
Configuration task list ·················································································································································· 106
Basic configuration for MAC authentication ············································································································· 106
Configuring MAC authentication globally ········································································································ 107
Configuring MAC authentication on a port ····································································································· 107
Specifying a MAC authentication domain ················································································································ 108
Configuring a MAC authentication guest VLAN ······································································································ 108
Configuring a MAC authentication critical VLAN ···································································································· 109
Configuring MAC authentication delay ····················································································································· 110
Enabling MAC authentication multi-VLAN mode ······································································································ 110
Displaying and maintaining MAC authentication ···································································································· 111
MAC authentication configuration examples ············································································································ 111
Local MAC authentication configuration example··························································································· 111
RADIUS-based MAC authentication configuration example··········································································· 113
ACL assignment configuration example············································································································ 115
Configuring portal authentication ·························································································································· 118
Overview ······································································································································································· 118
Extended portal functions ··································································································································· 118
Portal system components ··································································································································· 118
Portal system using the local portal server ········································································································ 120
Portal authentication modes ······························································································································· 121
Portal support for EAP ········································································································································· 122
Layer 2 portal authentication process ··············································································································· 123
Layer 3 portal authentication process ··············································································································· 124