ii
Configuring 802.1X ······················································································· 79
Access control methods ··································································································································· 79
802.1X VLAN manipulation ······························································································································ 79
Authorization VLAN ·································································································································· 79
Guest VLAN ············································································································································· 81
Auth-Fail VLAN ········································································································································ 82
Critical VLAN ············································································································································ 83
Critical voice VLAN ·································································································································· 85
Using 802.1X authentication with other features ····························································································· 86
ACL assignment ······································································································································· 86
User profile assignment ··························································································································· 86
EAD assistant ··········································································································································· 86
Redirect URL assignment ························································································································ 87
Configuration prerequisites ······························································································································ 87
802.1X configuration task list ··························································································································· 87
Enabling 802.1X ··············································································································································· 88
Enabling EAP relay or EAP termination ··········································································································· 88
Setting the port authorization state ·················································································································· 89
Specifying an access control method ·············································································································· 89
Setting the maximum number of concurrent 802.1X users on a port ······························································· 90
Setting the maximum number of authentication request attempts ··································································· 90
Setting the 802.1X authentication timeout timers ···························································································· 90
Configuring online user handshake ················································································································· 91
Configuration guidelines ··························································································································· 91
Configuration procedure ··························································································································· 91
Configuring the authentication trigger feature ·································································································· 92
Configuration guidelines ··························································································································· 92
Configuration procedure ··························································································································· 92
Specifying a mandatory authentication domain on a port ················································································ 92
Setting the quiet timer ······································································································································ 93
Configuring 802.1X reauthentication ················································································································ 93
Overview ·················································································································································· 93
Configuration restrictions and guidelines ································································································· 94
Configuring 802.1X periodic reauthentication ·························································································· 94
Configuring 802.1X manual reauthentication ··························································································· 94
Enabling the keep-online feature ············································································································· 95
Configuring an 802.1X guest VLAN ················································································································· 95
Configuration guidelines ··························································································································· 95
Configuration prerequisites ······················································································································ 96
Configuration procedure ··························································································································· 96
Enabling 802.1X guest VLAN assignment delay ····························································································· 96
Configuring an 802.1X Auth-Fail VLAN ··········································································································· 97
Configuration guidelines ··························································································································· 97
Configuration prerequisites ······················································································································ 97
Configuration procedure ··························································································································· 98
Configuring an 802.1X critical VLAN ················································································································ 98
Configuration guidelines ··························································································································· 98
Configuration prerequisites ······················································································································ 98
Configuration procedure ··························································································································· 98
Enabling the 802.1X critical voice VLAN ·········································································································· 99
Configuration restrictions and guidelines ································································································· 99
Configuration prerequisites ······················································································································ 99
Configuration procedure ··························································································································· 99
Specifying supported domain name delimiters ································································································ 99
Enabling 802.1X user IP freezing ·················································································································· 100
Sending 802.1X protocol packets out of a port without VLAN tags ······························································· 100
Setting the maximum number of 802.1X authentication attempts for MAC authenticated users ··················· 101
Configuring the EAD assistant feature ··········································································································· 101
Displaying and maintaining 802.1X ················································································································ 102
802.1X authentication configuration examples ······························································································ 102
Basic 802.1X authentication configuration example ·············································································· 102
To Next Page
Loading...
