11-8
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 11 Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
Authentication Manager
In Cisco IOS Rel ease 12.2(46 )SE and earli er, you could not use the same authorization methods, including
CLI commands and messages, on this switch and also on other network devices, such as a Catalyst 6000.
You had to use separate authentication configurations. Cisco IOS Release 12.2(50)SE and later supports
the same authorization methods on all Catalyst switches in a network.
Port-Based Authentication Methods, page 11-8
Per-User ACLs and Filter-Ids, page 11-9
Authentication Manager CLI Commands, page 11-9

Port-Based Authentication Methods

Tab le 11-1 802.1x Features
Authentication method
Mode
Single host Multiple host MDA1
1. MDA = Multidomain authentication.
Multiple
Authentication22
2. Also referred to as multiauth.
802.1x VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL3
Redirect URL 2
3. Supported in Cisco IOS Release 12.2(50)SE and later.
VLAN assignment VLAN assignmen t
Per-user ACL2
Filter-Id attribute2
Downloadable
ACL2
Redirect URL2
Per-user ACL2
Filter-Id attribute2
Downloadable
ACL2
Redirect URL2
MAC authentication bypass VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL2
Redirect URL2
VLAN assignment VLAN assignmen t
Per-user ACL2
Filter-Id attribute2
Downloadable
ACL2
Redirect URL2
Per-user ACL2
Filter-Id attribute2
Downloadable
ACL2
Redirect URL2
Standalone web authentication4Proxy ACL, Filter-Id attribute, downloadable ACL2
NAC Layer 2 IP validation Filter-Id attribute2
Downloadable ACL
Redirect URL
Filter-Id attribute2
Downloadable ACL
Redirect URL
Filter-Id attribute2
Downloadable ACL
Redirect URL
Filter-Id attribute2
Downloadable
ACL2
Redirect URL2
Web authentication as fallback
method4
4. For clients that do not support 802.1x authentication.
Proxy ACL
Filter-Id attribute2
Downloadable
ACL2
Proxy ACL
Filter-Id attribute2
Downloadable
ACL2
Proxy ACL
Filter-Id attribute2
Downloadable
ACL2
Proxy ACL2
Filter-Id attribute2
Downloadable
ACL2