4-1
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
CHAPT ER
4
802.1x Authentication
802.1x authentication allows a remote Cisco IOS router to connect authenticated
VPN users to a secure network through a VPN tunnel that is up at all times. The
Cisco IOS router will authenticate users through a RADIUS server on th e secure
network.
802.1x authentication is applied to switch ports or Ethernet (routed) ports, but not
to both types of interfaces. If 802.1x authentication is applied to an Ethernet port,
non-authenticated users can be routed outside the VPN tunnel to the Internet.
802.1x authentication is configured on interfaces by using the LAN wizard.
However, before you can enable 802.1x on any interface, AAA must be enabled
on your Cisco IOS router. If you attempt to use the LAN wizard before AAA is
enabled, a window appears asking if you want to enable AAA. If you choose to
enable AAA, then the 802.1x configuration screens will appear as part of the LAN
wizard. If you choose to not enable AAA, then the 802.1x configuration screens
will not appear.

LAN Wizard: 802.1x Authentication (Switch Ports)

This window allows you to enable 802.1x authentication on the switch port or
ports you selected for configuration using the LAN wizard.
Enable 802.1x Authentication
Check Enable 802.1x Authentication to enable 802.1x authentication on the
switch port.