802.1X Authentication Configuration Guidelines - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Configuring 802.1x Authentication
Table 10-4
Default 802.1x Authentication Configuration (continued)
Feature
Client timeout period
Authentication server timeout period
Inactivity timeout
Guest VLAN
Inaccessible authentication bypass
Restricted VLAN
Authenticator (switch) mode
MAC authentication bypass
Voice-aware security
802.1x Authentication Configuration Guidelines
•
•
•
•
802.1x Authentication
•
•
•
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
10-38
Default Setting
30 seconds (when relaying a request from the authentication server to the
client, the amount of time the switch waits for a response before resending the
request to the client.)
30 seconds (when relaying a response from the client to the authentication
server, the amount of time the switch waits for a reply before resending the
response to the server.)
You can change this timeout period by using the authentication timer server
interface configuration command.
Disabled.
None specified.
Disabled.
None specified.
None specified.
Disabled.
Disabled
802.1x Authentication, page 10-38
VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass,
page 10-39
MAC Authentication Bypass, page 10-40
Maximum Number of Allowed Devices Per Port, page 10-40
When IEEE 802.1x authentication is enabled, ports are authenticated before any other Layer 2
feature is enabled.
If the VLAN to which an 802.1x-enabled port is assigned changes, this change is transparent and
does not affect the switch. For example, this change occurs if a port is assigned to a RADIUS
server-assigned VLAN and is then assigned to a different VLAN after re-authentication.
If the VLAN to which an 802.1x port is assigned to shut down, disabled, or removed, the port
becomes unauthorized. For example, the port is unauthorized after the access VLAN to which a port
is assigned shuts down or is removed.
The IEEE 802.1x protocol is supported on Layer 2 static-access ports and voice VLAN ports, but it
is not supported on these port types:
Dynamic-access ports—If you try to enable 802.1x authentication on a dynamic-access (VLAN
–
Query Protocol [VQP]) port, an error message appears, and 802.1x authentication is not
enabled. If you try to change an 802.1x-enabled port to dynamic VLAN assignment, an error
message appears, and the VLAN configuration is not changed.
Chapter 10
Configuring IEEE 802.1x Port-Based Authentication
OL-26520-01
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
