9-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
OL-10101-02
Chapter 9 Configuring IEEE 802.1x Port-Based Authentication
Configuring IEEE 802.1x Authentication
Set the action to be taken when the switch tries to re-authenticate the client by using the
Termination-Action RADIUS attribute (Attribute[29]). If the value is DEFAULT or is not set, the
session ends. If the value is RADIUS-Request, the re-authentication process starts.
View the NAC posture token, which shows the posture of the client, by using the show dot1x
privileged EXEC command.
Configure secondary private VLANs as guest VLANs.
Configuring NAC Layer 2 IEEE 802.1x validation is similar to configuring IEEE 802.1x port-based
authentication except that you must configure a posture token on the RADIUS server. For information
about configuring NAC Layer 2 IEEE 802.1x validation, see the “Configuring NAC Layer 2 IEEE 802.1x
Validation” section on page 9-27 and the “Enabling Periodic Re-Authentication” section on page 9-19.
For more information about NAC, see the Network Admission Control Software Configuration Guide.
Configuring IEEE 802.1x Authentication
These sections describe how to configure IEEE 802.1x port-based authentication on your switch:
Default IEEE 802.1x Authentication Configuration, page 9-12
IEEE 802.1x Authentication Configuration Guidelines, page 9-13
Upgrading from a Previous Software Release, page 9-15
Configuring IEEE 802.1x Authentication, page 9-15 (required)
Configuring the Switch-to-RADIUS-Server Communication, page 9-17 (required)
Configuring the Host Mode, page 9-18 (optional)
Enabling Periodic Re-Authentication, page 9-19 (optional)
Manually Re-Authenticating a Client Connected to a Port, page 9-19 (optional)
Changing the Quiet Period, page 9-20 (optional)
Changing the Switch-to-Client Retransmission Time, page 9-20 (optional)
Setting the Switch-to-Client Frame-Retransmission Number, page 9-21 (optional)
Configuring IEEE 802.1x Accounting, page 9-22 (optional)
Configuring a Guest VLAN, page 9-23 (optional)
Configuring a Restricted VLAN, page 9-24 (optional)
Configuring IEEE 802.1x Authentication with WoL, page 9-26
Configuring NAC Layer 2 IEEE 802.1x Validation, page 9-27
Resetting the IEEE 802.1x Configuration to the Default Values, page 9-28 (optional)

Default IEEE 802.1x Authentication Configuration

Table 9-2 shows the default IEEE 802.1x authentication configuration.