Cisco Systems, Inc.
All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 3 of 8
VLAN assignment with 802.1X IEEE 802.1x is a client/server-based access control and authentication
protocol that restricts unauthorized devices from connecting to a LAN
through publicly accessible ports. The 802.1x standard authenticates each
user device connected to a switch port before making available any
services offered by the switch or the LAN. The current implementation of
IEEE 802.1X in Cisco Catalyst switches is simply to authenticate the port
with a RADIUS
6
server and authorize it to be in the present port VLAN.
With the 7.2.2 software enhancement, the user can specify the authorized
VLAN for the user to gain access to when the authentication is complete.
This enhancement is achieved by maintaining a username-to-VLAN
database within the RADIUS server. Following successful 802.1x
authentication, RADIUS sends the VLAN to the switch for that particular
user and the switch configures the attached port for the specified VLAN.
Thus, 802.1x authenticated ports are assigned to a VLAN based on the
username of the supplicant connected to a port.
Authentication lockout
enhancement
The authentication lockout feature provides the capability to block users
trying to access the network on a trial basis without their knowing the
exact username and password. When the user is blocked because of a
user-defined number of unsuccessful login attempts (between 3 and 10
attempts), users are denied access to the switch for a user-defined period
of time.
With this enhancement, the range of user-defined seconds of lockout time
has been increased from 30 to 600 seconds to 30 to 43200 seconds.
ErrDisable Reactivation Per Port A port is in errdisable state if it is enabled in NVRAM
7
, but is disabled at
runtime by any process. The errdisable timeout feature allows you to
configure a timeout period for ports in errdisable state; the ports are
automatically reenabled after the selected time interval, on a global basis.
This enhancement enables the user to manually set ports to enable on a
per port basis, rather than on a global basis.
Various Management Information
Base (MIB) Support
CISCO-AAA-CLIENT-MIB Enhancement
CISCO-ENVMON-MIB
CISCO-PROCESS-MIB
CISCO-STACK-MIB Enhancement
CISCO-STP-EXTENSIONS-MIB
CISCO-PAGP-MIB
CISCO-CATOS-ACL-QOS-MIB
CISCO-CDP-MIB Enhancement
CISCO-L2-TUNNEL-CONFIG-MIB
CISCO-SWITCH-ENGINE-MIB
1. Virtual LAN
2. Class of service
3. Protocol data units
4. Spanning-Tree Protocol
5. Virtual Trunking Protocol
6. Remote Access Dial-In User Service
7. Nonvolatile RAM
Table 3 Software Features of Cisco Catalyst Operating System Software Version 7.2(2)
Software Feature Description
(9 pages)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals