Cisco IE 3000, Руководство по настройке программного обеспечения

Страница: 232 / 874

12-2
Cisco IE 3000 Switch Software Configuration Guide
OL-13018-03
Chapter 12 Configuring IEEE 802.1x Port-Based Authentication
Understanding IEEE 802.1x Port-Based Authentication
•
802.1x Authentication with VLAN Assignment, page 12-14
• 802.1x Authentication with Guest VLAN, page 12-17
•
802.1x Authentication with Restricted VLAN, page 12-18
• 802.1x Authentication with Inaccessible Authentication Bypass, page 12-19
•
802.1x Authentication with Voice VLAN Ports, page 12-20
• 802.1x Authentication with Port Security, page 12-20
•
802.1x Authentication with Wake-on-LAN, page 12-21
• 802.1x Authentication with MAC Authentication Bypass, page 12-22
•
Network Admission Control Layer 2 802.1x Validation, page 12-23
• Flexible Authentication Ordering, page 12-23
•
Open1x Authentication, page 12-24
• 802.1x Switch Supplicant with Network Edge Access Topology (NEAT), page 12-24
•
802.1x Authentication with Downloadable ACLs and Redirect URLs, page 12-15
• Web Authentication, page 12-25
Device Roles
Devices roles with 802.1x port-based authentication:
Figure 12-1 802.1x Device Roles
•
Client —the device (workstation) that requests access to the LAN and switch services and responds
to requests from the switch. The workstation must be running 802.1x-compliant client software such
as that offered in the Microsoft Windows XP operating system. (The client is the
supplicant in
the 802.1x standard.)
Note
To resolve Windows XP network connectivity and 802.1x authentication issues, read the
Microsoft Knowledge Base article at this URL:
http://support.microsoft.com/support/kb/articles/Q303/5/97.ASP
•
Authentication server —performs the actual authentication of the client. The authentication server
validates the identity of the client and notifies the switch whether or not the client is authorized to
access the LAN and switch services. Because the switch acts as the proxy, the authentication service
is transparent to the client. In this release, the RADIUS security system with Extensible
101229
Work s t a tion s
(client s )
Authentic a tion
s erver
(RADIU S )