Chapter4 802.1x Authentication
LAN Wizard: 802.1x Authentication (VLAN or Ethernet)
4-8
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12

Use 802.1x Authentication to separate trusted and untrusted traffic on the interface

Check Use 802.1x Authentication to separate trusted and untrusted traffic on
the interface to enable 802.1x authentication.

Exception Lists

Click Exception Lists to create or edit an exception list. An exception list
exempts certain clients from 802.1x authentication while allowing them to use the
VPN tunnel.

Exempt Cisco IP phones from 802.1x authentication

Check Exempt Cisco IP phones from 802.1x authentication to exempt Cisco IP
phones from 802.1x authentication while allowing them to use the VPN tunnel.
802.1x Exception List
An exception list exempts certain clients from 802.1x authent ication while
allowing them to use the VPN tunnel. Exempt clients are identified by their MAC
addresses.
Add
Click Add to open a window where you can add the MAC address of a client. The
MAC address must be in the format that matches one of these examples:
•0030.6eb1.37e4
•00-30-6e-b1-37-e4
Cisco SDM rejects misformatted MAC addresses, except for MAC addresses
shorter than the given examples. Shorter MAC addresses will be padded with a
“0” (zero) for each missing digit.
Note Cisco SDM’s 802.1x feature does not support the CLI option that associates
policies with MAC addresses and will not include in the exception list MAC
addresses that have a policy associated with them.