Cisco Systems 3560 Default 802.1x Authentication Configuration

10-30
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
• Configuring a Restricted VLAN, page 10-47 (optional)
• Configuring the Inaccessible Authentication Bypass Feature, page 10-49 (optional)
• Configuring 802.1x Authentication with WoL, page 10-52 (optional)
• Configuring MAC Authentication Bypass, page 10-53 (optional)
• Configuring NAC Layer 2 802.1x Validation, page 10-54 (optional)
• Configuring 802.1x Switch Supplicant with NEAT, page 10-55
• Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs, page 10-57
• Configuring Flexible Authentication Ordering, page 10-59
• Configuring Web Authentication, page 10-60 (optional)
• Configuring a Web Authentication Local Banner, page 10-64 (optional)
• Disabling 802.1x Authentication on the Port, page 10-64 (optional)
• Resetting the 802.1x Authentication Configuration to the Default Values, page 10-65 (optional)
Default 802.1x Authentication Configuration
Tabl e 10-4 shows the default 802.1x authentication configuration.
Tab l e 10-4 Default 802.1x Authentication Configuration
Feature Default Setting
Switch 802.1x enable state Disabled.
Per-port 802.1x enable state Disabled (force-authorized).
The port sends and receives normal traffic without 802.1x-based
authentication of the client.
AAA Disabled.
RADIUS server
• IP address
• UDP authentication port
• Key
• None specified.
• 1812.
• None specified.
Host mode Single-host mode.
Control direction Bidirectional control.
Periodic re-authentication Disabled.
Number of seconds between
re-authentication attempts
3600 seconds.
Re-authentication number 2 times (number of times that the switch restarts the authentication process
before the port changes to the unauthorized state).
Quiet period 60 seconds (number of seconds that the switch remains in the quiet state
following a failed authentication exchange with the client).
Retransmission time 30 seconds (number of seconds that the switch should wait for a response to an
EAP request/identity frame from the client before resending the request).