13-7
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 13 Configuring IEEE 802.1x Port-Based Authentication
Information About Configuring IEEE 802.1x Port-Based Authentication
Per-User ACLs and Filter-Ids
In releases earlier than Cisco IOS Release 12.2(50)SE, per-user ACLs and filter IDs were only supported
in single-host mode. In Cisco IOS Release 12.2(50), support was added for MDA- and multiauth-enabled
ports. In 12.2(52)SE and later, support was added for ports in multihost mode.
In releases earlier than Cisco IOS Release 12.2(50)SE, an ACL configured on the switch is not
compatible with an ACL configured on another device running Cisco IOS software, such as a
Catalyst
6500 switch.
In Cisco IOS Release 12.2(50)SE or later, the ACLs configured on the switch are compatible with other
devices running the Cisco IOS release.
Table 13-1 802.1x Features
Authentication Method
Mode
Single Host Multiple Host MDA
1
1. MDA = Multidomain authentication.
Multiple
Authentication
2
2. Also referred to as multiauth.
802.1x VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
3
Redirect URL
3
3. Supported in Cisco IOS Release 12.2(50)SE and later.
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
4
Redirect URL
3
4. Supported in Cisco IOS Release 12.2(50)SE and later.
VLAN assignment
Per-user ACL
3
Filter-Id attribute
3
Downloadable
ACL
3
Redirect URL
3
Per-user ACL
3
Filter-Id attribute
3
Downloadable
ACL
3
Redirect URL
3
MAC authentication bypass VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
3
Redirect URL
3
VLAN assignment
Per-user ACL
Filter-ID attribute
Downloadable
ACL
3
Redirect URL
3
VLAN assignment
Per-user ACL
3
Filter-Id attribute
3
Downloadable
ACL
3
Redirect URL
3
Per-user ACL
3
Filter-Id attribute
3
Downloadable
ACL
3
Redirect URL
3
Standalone web authentication
4
Proxy ACL, Filter-Id attribute, downloadable ACL
2
NAC Layer 2 IP validation Filter-Id attribute
3
Downloadable ACL
Redirect URL
Filter-Id attribute
3
Downloadable ACL
Redirect URL
Filter-Id attribute
3
Downloadable ACL
Redirect URL
Filter-Id attribute
3
Downloadable
ACL
3
Redirect URL
3
Web authentication as fallback
method
5
5. For clients that do not support 802.1x authentication.
Proxy ACL
Filter-Id attribute
3
Downloadable
ACL
3
Proxy ACL
Filter-Id attribute
3
Downloadable
ACL
3
Proxy ACL
Filter-Id attribute
3
Downloadable
ACL
3
Proxy ACL
3
Filter-Id attribute
3
Downloadable
ACL
3
