Cisco Catalyst 2960-X, Руководство по настройке безопасности

Страница: 301 / 498

Table 26: Accounting AV Pairs
STOP INTERIM START AV Pair Name Attribute Number
Always Always Always User-Name Attribute[1]
Always Always Always NAS-IP-Address Attribute[4]
Always Always Always NAS-Port Attribute[5]
Sometimes Sometimes
7
Never Framed-IP-Address Attribute[8]
Always Always Always Class Attribute[25]
Always Always Always Called-Station-ID Attribute[30]
Always Always Always Calling-Station-ID Attribute[31]
Always Always Always Acct-Status-Type Attribute[40]
Always Always Always Acct-Delay-Time Attribute[41]
Always Always Never Acct-Input-Octets Attribute[42]
Always Always Never Acct-Output-Octets Attribute[43]
Always Always Never Acct-Input-Packets Attribute[47]
Always Always Never Acct-Output-Packets Attribute[48]
Always Always Always Acct-Session-ID Attribute[44]
Always Always Always Acct-Authentic Attribute[45]
Always Always Never Acct-Session-Time Attribute[46]
Always Never Never Acct-Terminate-Cause Attribute[49]
Always Always Always NAS-Port-Type Attribute[61]
7 The Framed-IP-Address AV pair is sent when a valid static IP address is configured or w when a Dynamic Host Control Protocol (DHCP) binding exists for
the host in the DHCP snooping bindings table.
802.1x Readiness Check
The 802.1x readiness check monitors 802.1x activity on all the switch ports and displays information about
the devices connected to the ports that support 802.1x. You can use this feature to determine if the devices
connected to the switch ports are 802.1x-capable. You use an alternate authentication such as MAC
authentication bypass or web authentication for the devices that do not support 802.1x functionality.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 277
Configuring IEEE 802.1x Port-Based Authentication
802.1x Readiness Check