Cisco Systems 3560 Manual De Usuario

Descargar
Página de 1288
 
10-27
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 10      Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
For more information, see the 
 and the 
.
Web Authentication with Automatic MAC Check
You can use web authentication with automatic MAC check to authenticate a client that does not 
support 802.1x or web-browser functionality. End hosts, such as printers, can automatically authenticate 
by using the MAC address without any other requirements. 
Web authentication with automatic MAC check only works in web authentication standalone mode. You 
cannot use this if web authentication is configured as a fallback to 802.1x authentication.
The MAC address of the device must be configured in the Access Control Server (ACS) for the automatic 
MAC check to succeed. The automatic MAC check allows managed devices, such as printers, to skip 
web authentication. 
Note
The interoperability of web authentication (with automatic MAC check) and 802.1x MAC authentication 
configured on different ports of the same switch is not supported.
Local Web Authentication Banner
You can create a banner that will appear when you log into a switch by using web authentication. 
The Banner appears on both the login page and the authentication-result pop-up page. The banner 
appears in these authentication-result pop-up pages 
  •
Authentication Successful
  •
Authentication Failed
  •
Authentication Expired
You create a banner by using the ip admission auth-proxy-banner http
 
global configuration command. 
The default banner Cisco Systems and Switch host-name Authentication appear on the Login Page. Cisco 
System
 appears on the authentication result pop-up page, as shown in