Supplicant that is connected to an authenticator port, before the services offered by the client or the network is made available IEEE 802.1X port-based authentication is configured on Cisco NCS 540 Series Router to prevent unauthorized routers (supplicants) from gaining access to the network. Understanding 802.1X Port-Based Authentication The server determines whether the Supplicant is authorized to access the services provided by the system in which the Authenticator Based on the credentials provided by the Supplicant, Supplicant - An entity at one end of a point-to-point LAN segment that seeks to be authenticated by an Authenticator attached to theĪuthentication Server - An entity that provides an authentication service to an Authenticator. The devices in the network have the following specific roles with IEEE 802.1X authentication:Īuthenticator - An entity that facilitates authentication of other entities attached to the same LAN. The note is not applicable from Cisco IOS XR Software Release 7.2.1. Currently, the scenario in which the 802.1x authenticator (RADIUSĬlient) uses a line card port to communicate with the RADIUS server is not supported. However, this restriction is not applicable from Cisco IOS XR Software Release 7.2.1.Ĩ02.1X authentication is supported only on physical interfaces.Ĭommunication with the RADIUS server that is initiated by the 802.1x authenticator (RADIUS client) must happen through theīuilt-in management interface on the route processor (RP). Subinterfaces and VLAN-tagged traffic are not supported on the ports on which 802.1X port-based authentication is configured.

Walled-garden VLAN and policies on authentication failures are not supported. Only single tag dot1q VLAN sub-interfaces are supported. The following restrictions are applicable for IEEE 802.1X port-based authentication: Restrictions for IEEE 802.1X Port-Based Authentication

Verify 802.1X Port-Based Authentication.

802.1X with Remote RADIUS Authentication.

Prerequisites for 802.1X Port-Based Authentication.

Understanding 802.1X Port-Based Authentication.

Restrictions for IEEE 802.1X Port-Based Authentication.

Support for multi-auth and multi-host modes by 802.1X to allow multiple hosts or MAC addresses on a single port was introduced. Unauthorized devices (clients) from gaining access to the network.

This chapter describes how to configure IEEE 802.1X port-based authentication in Cisco NCS 540 Series Routers to prevent After successful authentication, the port It blocks all traffic to and fromĭevices at the interface, until the Authentication server authenticates the client. The IEEE 802.1X port-based authentication protects the network from unauthorized clients.

Cisco iol 802.1x