Cisco Systems 3560-X, 3750-X Configuring 802.1x Authentication

11-34

Catalyst 3750-X and 3560-X Switch Software Configuration Guide

OL-21521-01

Chapter 11 Configuring IEEE 802.1x Port-Based Authentication

Configuring 802.1x Authentication

Some MKA counters are aggregated globally, while others are updated both globally and per session.

You can also obtain information about the status of MKA sessions.

Configuring 802.1x Authentication

These sections contain this configuration information:

• Default 802.1x Authentication Configuration, page 11-35

• 802.1x Authentication Configuration Guidelines, page 11-36

• Configuring 802.1x Readiness Check, page 11-38 (optional)

• Configuring Voice Aware 802.1x Security, page 11-39 (optional)

• Configuring the Switch-to-RADIUS-Server Communication, page 11-43 (required)

• Configuring 802.1x Violation Modes, page 11-41

• Configuring 802.1x Authentication, page 11-41

• Configuring the Host Mode, page 11-44 (optional)

• Configuring Periodic Re-Authentication, page 11-45 (optional)

• Manually Re-Authenticating a Client Connected to a Port, page 11-46 (optional)

• Changing the Quiet Period, page 11-47 (optional)

• Changing the Switch-to-Client Retransmission Time, page 11-47 (optional)

• Setting the Switch-to-Client Frame-Retransmission Number, page 11-48 (optional)

• Setting the Re-Authentication Number, page 11-49 (optional)

• Enabling MAC Move, page 11-49 (optional)

• Configuring 802.1x Accounting, page 11-50 (optional)

• Configuring a Guest VLAN, page 11-51 (optional)

• Configuring a Restricted VLAN, page 11-52 (optional)

• Configuring the Inaccessible Authentication Bypass Feature, page 11-53 (optional)

• Configuring 802.1x Authentication with WoL, page 11-56 (optional)

• Configuring MAC Authentication Bypass, page 11-56 (optional)

• Configuring 802.1x User Distribution, page 11-57 (optional)

• Configuring NAC Layer 2 IEEE 802.1x Validation, page 11-58 (optional)

• Resetting the 802.1x Authentication Configuration to the Default Values, page 11-66 (optional)

• Disabling 802.1x Authentication on the Port, page 11-66 (optional)

• Configuring an Authenticator and a Supplicant Switch with NEAT, page 11-59 (optional)

• Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs, page 11-61

(optional)

• Configuring VLAN ID-based MAC Authentication, page 11-63 (optional)

• Configuring Flexible Authentication Ordering, page 11-64 (optional)

• Configuring Open1x, page 11-64 (optional)