Cisco 350 Series Administration Manual page 532

Managed switches

Hide thumbs Also See for 350 Series:

Table of Contents

Security: 802.1X Authentication

Unauthenticated Traffic

With Guest VLAN

re-mapped to

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4

Without Guest VLAN

Switch as 802.1x Supplicant

In addition to its capacity as an 802.1x authenticator, the switch itself can be configured as an

802.1x supplicant seeking port access permission from a neighbor. The supplicant supports the

EAP MD5-Challenge method specified by RFC3748. The method authenticates a client by its

name and password.

When the supplicant is enabled on an interface, the interface becomes unauthorized. When the

802.1X authentication process succeeds, the interface state is changed to authorized.

The following events start the 802.1X supplicant authentication on a port:

Supplicant is enabled on a port in the Up status.

The status of the port is changed to Up and supplicant is enabled on the port.

An EAP Identifier Request message is received on the port and the supplicant is

enabled on the port.

802.1x authenticator and supplicant cannot be configured at the same time on a single

Authenticated Traffic

With Radius VLAN

re-mapped to

Without Radius VLAN

bridged based

on the static

configuration

Show Quick Links

Table of Contents