Cisco Systems 3560 사용자 설명서

다운로드
페이지 1288
 
10-7
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 10      Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
Authentication Manager
In Cisco IOS Release 12.2(46)SE and earlier, you could not use the same authorization methods, including 
CLI commands and messages, on this switch and also on other network devices, such as a Catalyst 6000. 
You had to use separate authentication configurations. Cisco IOS Release 12.2(50)SE and later supports 
the same authorization methods on all Catalyst switches in a network. 
  •
  •
  •
Port-Based Authentication Methods
Table 10-1
802.1x Features
Authentication method
Mode
Single host
Multiple host
MDA
1
1.
MDA = Multidomain authentication.
Multiple 
Authentication
22
2.
Also referred to as multiauth.
802.1x
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable 
ACL
3
Redirect URL 
2
3.
Supported in Cisco IOS Release 12.2(50)SE and later.
VLAN assignment
VLAN assignment
Per-user ACL
2
Filter-Id attribute
2
Downloadable 
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable 
ACL
2
Redirect URL
2
MAC authentication bypass
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable 
ACL
2
Redirect URL
2
VLAN assignment
VLAN assignment
Per-user ACL
2
Filter-Id attribute
2
Downloadable 
ACL
2
Redirect URL
2
Per-user ACL
2
Filter-Id attribute
2
Downloadable 
ACL
2
Redirect URL
2
Standalone web authentication
4
Proxy ACL, Filter-Id attribute, downloadable ACL
2
NAC Layer 2 IP validation
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable ACL
Redirect URL
Filter-Id attribute
2
Downloadable 
ACL
2
Redirect URL
2
Web authentication as fallback 
method
4
4.
For clients that do not support 802.1x authentication.
Proxy ACL
Filter-Id attribute
2
Downloadable 
ACL
2
Proxy ACL
Filter-Id attribute
2
Downloadable 
ACL
2
Proxy ACL
Filter-Id attribute
2
Downloadable 
ACL
2
Proxy ACL
2
Filter-Id attribute
2
Downloadable 
ACL
2