Security: 802.1X Authentication
Properties
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
456
20
•
Guest VLAN
—Select to enable the use of a guest VLAN for unauthorized
ports. If a guest VLAN is enabled, all unauthorized ports automatically join
the VLAN selected in the
Guest VLAN ID
field. If a port is later authorized, it
is removed from the guest VLAN.
•
Guest VLAN ID
—Select the guest VLAN from the list of VLANs.
•
Guest VLAN Timeout
—Define a time period:
-
After linkup, if the software does not detect the 802.1X supplicant, or the
authentication has failed, the port is added to the guest VLAN, only after
the
Guest VLAN timeout
period has expired.
-
If the port state changes from
Authorized
to
Not Authorized
, the port is
added to the guest VLAN only after the
Guest VLAN
timeout has expired.
•
Trap Settings—To enable traps, select one of more of the following options:
-
802.1x Authentication Failure Traps
—Select to generate a trap if 802.1x
authentication fails.
-
802.1x Authentication Success Traps
—Select to generate a trap if
802.1x authentication succeeds.
-
MAC Authentication Failure Traps
—Select to generate a trap if MAC
authentication fails.
-
MAC Authentication Success Traps
—Select to generate a trap if MAC
authentication succeeds.
-
Web Authentication Failure Traps
—Select to generate a trap if Web
authentication fails.
-
Web Authentication Success Traps
—Select to generate a trap if Web
authentication succeeds.
-
Web Authentication Quiet Traps
—Select to generate a trap if a quiet
period commences.
When the device is in Layer 3 router mode, the VLAN Authentication Table
displays all VLANs, and indicates whether authentication has been enabled on
them.
To change Enable or Disable authentication on a VLAN, select it, click
Edit
and
select either
Enable
or
Disable
.
STEP 3
Click
Apply
. The 802.1X properties are written to the Running Configuration file.
