xxi
7. Optional: Configure 802.1X Controlled Directions . . . . . . . . . . . . 13-27
Wake-on-LAN Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-28
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-29
Example: Configuring 802.1X Controlled Directions . . . . . . . . 13-29
Unauthenticated VLAN Access (Guest VLAN Access) . . . . . . . . . . . 13-29
Characteristics of Mixed Port Access Mode . . . . . . . . . . . . . . . . 13-30
Configuring Mixed Port Access Mode . . . . . . . . . . . . . . . . . . . . . 13-31
802.1X Open VLAN Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-32
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-32
VLAN Membership Priorities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-33
Use Models for 802.1X Open VLAN Modes . . . . . . . . . . . . . . . . . . . . 13-34
Operating Rules for Authorized-Client and
Unauthorized-Client VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-39
Setting Up and Configuring 802.1X Open VLAN Mode . . . . . . . . . . . 13-42
802.1X Open VLAN Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . 13-47
Option For Authenticator Ports: Configure Port-Security
To Allow Only 802.1X-Authenticated Devices . . . . . . . . . . . . . . . . . 13-48
Port-Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-49
Configuring Switch Ports To Operate As
Supplicants for 802.1X Connections to Other Switches . . . . . . . . 13-50
Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-50
Supplicant Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-52
Displaying 802.1X Configuration, Statistics, and Counters . . . . 13-55
Show Commands for Port-Access Authenticator . . . . . . . . . . . . . . . 13-55
Viewing 802.1X Open VLAN Mode Status . . . . . . . . . . . . . . . . . . . . . 13-64
Show Commands for Port-Access Supplicant . . . . . . . . . . . . . . . . . . 13-68
How RADIUS/802.1X Authentication Affects VLAN Operation . 13-69
VLAN Assignment on a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-70
Operating Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-70
Example of Untagged VLAN Assignment in a RADIUS-Based
Authentication Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-72
Enabling the Use of GVRP-Learned Dynamic VLANs
in Authentication Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-76
Messages Related to 802.1X Operation . . . . . . . . . . . . . . . . . . . . . . . 13-78
To Next Page
Loading...
