Справочник Пользователя для Cisco IOS Software for Cisco Catalyst 4900 Series Switches S49ESK9-12246SG=
Модели
S49ESK9-12246SG=
Product Bulletin
© 2008 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 4 of 9
Release 12.2(44)SG specifically supports the “location identification” TLV for LLDP-MED. This TLV
allows network connected devices to advertise their locations to the endpoints. There are two
formats in which location can be configured. One way consists of civic address format, which
includes physical address, street address, city, state, and country. The other format is called
emergency local identification number or ‘Elin’ for short.
802.1X identity features:
The following 802.1X features are now supported on the Cisco Catalyst 4500 Supervisor Engine 6-
E:
●
802.1X guest VLAN: Users can configure a guest VLAN for each 802.1X port on the switch
to provide limited services to clients, such as downloading the 802.1X supplicant. Clients
that run legacy operating systems not supporting 802.1X natively can therefore gain access
to network resources to retrieve such a supplicant software package. With a guest VLAN
enabled on an 802.1X port, the switch assigns clients to a guest VLAN provided (1) the
authentication server does not receive a response to its Extensible Authentication Protocol
over LAN (EAPoL) request or identity frame or (2) the EAPoL packets are not sent by the
client.
●
802.1X with authentication-failed VLAN assignment: By configuring authentication-failed
VLAN assignment on any Layer 2 port on the Cisco Catalyst 4500 Series, you can provide
limited network services to clients that fail the authentication process.
●
802.1X wake on LAN (aka Unidirectional Controlled Port): Wake on LAN is a feature in
which a special "wakeup" packet is sent to a device that has suspended itself to conserve
power, causing the device to power up. This feature is often used to push maintenance to
PCs in an enterprise network at night. However, many devices terminate their 802.1X
session before suspending, which prevents any packets from being sent to them. This
feature permits the sending of the "wakeup" packet to devices, even if they have
deauthenticated themselves from 802.1X.
●
802.1X RADIUS accounting: Some 802.1X customers need an accounting mechanism to
better track the usage of their networking devices, mainly the connection duration of their
users, based on which they can determine the charge, among other potential uses of the
information. The main functionality is to keep track of important events in the RADIUS
server, such as the starting time and stopping time of each supplicant's connection. A
supplicant's connection session is defined as the duration from the time the supplicant is
authorized to use the port until the time the supplicant stops using the port.
●
RADIUS-supplied timeout: Ability to configure the Cisco Catalyst 4500 Series to use a
RADIUS-provided reauthentication timeout.
●
802.1X critical authentication: This feature is intended to allow network access for critical
machines, when 802.1X is unable to reach the configured RADIUS server(s). Any
authentication attempt on a critical port will first check the status of all known 802.1X
RADIUS servers. If none is reachable, the port will be immediately AUTHORIZED. This
state is known as Critical-Auth.
Per-VLAN CTI:
Service providers (operating Metro Ethernet networks) offer transparent Ethernet access services
to their customers for which the Cisco Catalyst 4500 acts as a pure Layer 2 switch (no operational
SVI associated with VLAN) connecting customers with pure Layer 2 VLAN switching locally. They