Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
24
Book Title
802.1x Configuration Guidelines
These are the 802.1x authentication configuration guidelines:
•
When the 802.1x protocol is enabled, ports are authenticated before any other Layer 2 feature is
enabled.
•
The 802.1x protocol is supported on Layer 2 static-access ports, but it is not supported on these port
types:
–
Trunk port—If you try to enable 802.1x on a trunk port, an error message appears, and 802.1x
is not enabled. If you try to change the mode of an 802.1x-enabled port to trunk, the port mode
is not changed.
Table 1
Default 802.1x Configuration
Feature
Default Setting
Authentication, authorization, and
accounting (AAA)
Disabled.
RADIUS server
•
IP address
•
UDP authentication port
•
Key
•
None specified.
•
1645.
•
None specified.
Per-interface 802.1x enable state
Disabled (force-authorized).
The port transmits and receives normal traffic without
802.1x-based authentication of the client.
Periodic reauthentication
Disabled.
Number of seconds between
reauthentication attempts
3600 seconds.
Quiet period
60 seconds (number of seconds that the switch remains in
the quiet state following a failed authentication exchange
with the client).
Retransmission time
30 seconds (number of seconds that the switch should
wait for a response to an EAP request/identity frame
from the client before retransmitting the request).
Maximum retransmission number
2 times (number of times that the switch will send an
EAP-request/identity frame before restarting the
authentication process).
Multiple host support
Disabled.
Client timeout period
30 seconds (when relaying a request from the
authentication server to the client, the amount of time the
switch waits for a response before retransmitting the
request to the client). This setting is not configurable.
Authentication server timeout period
30 seconds (when relaying a response from the client to
the authentication server, the amount of time the switch
waits for a reply before retransmitting the response to the
server). This setting is not configurable.
