xviii
B. Specify User-Based Authentication or Return to
Port-Based Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-19
Example: Configuring User-Based 802.1X Authentication . . . . 13-20
Example: Configuring Port-Based 802.1X Authentication . . . . 13-20
2. Reconfigure Settings for Port-Access . . . . . . . . . . . . . . . . . . . . . . . 13-21
3. Configure the 802.1X Authentication Method . . . . . . . . . . . . . . . . 13-24
4. Enter the RADIUS Host IP Address(es) . . . . . . . . . . . . . . . . . . . . . 13-25
5. Enable 802.1X Authentication on the Switch . . . . . . . . . . . . . . . . 13-26
6. Optional: Reset Authenticator Operation . . . . . . . . . . . . . . . . . . . . 13-27
7. Optional: Configure 802.1X Controlled Directions . . . . . . . . . . . . 13-27
Wake-on-LAN Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-28
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-29
Example: Configuring 802.1X Controlled Directions . . . . . . . . 13-29
Unauthenticated VLAN Access (Guest VLAN Access) . . . . . . . . . . . 13-29
Characteristics of Mixed Port Access Mode . . . . . . . . . . . . . . . . 13-30
Configuring Mixed Port Access Mode . . . . . . . . . . . . . . . . . . . . . 13-31
802.1X Open VLAN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-32
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-32
VLAN Membership Priorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-33
Use Models for 802.1X Open VLAN Modes . . . . . . . . . . . . . . . . . . . . 13-33
Operating Rules for Authorized-Client and
Unauthorized-Client VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-39
Setting Up and Configuring 802.1X Open VLAN Mode . . . . . . . . . . . 13-43
802.1X Open VLAN Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . 13-48
Option For Authenticator Ports: Configure Port-Security
To Allow Only 802.1X-Authenticated Devices . . . . . . . . . . . . . . . . . 13-49
Port-Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-50
Configuring Switch Ports To Operate As
Supplicants for 802.1X Connections to Other Switches . . . . . . . . 13-51
Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-51
Supplicant Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-53
Displaying 802.1X Configuration, Statistics, and Counters . . . . 13-55
Show Commands for Port-Access Authenticator . . . . . . . . . . . . . . . 13-55
Viewing 802.1X Open VLAN Mode Status . . . . . . . . . . . . . . . . . . . . . 13-64
Show Commands for Port-Access Supplicant . . . . . . . . . . . . . . . . . . 13-68