Flexible_Authentication_Review_map

• 1 Flexible Authentication
  • 1.1 Flexible Authentication Overview
    • 1.1.1 MAC VLANs
    • 1.1.2 Data VLAN Requirements for Flexible Authentication
    • 1.1.3 Voice VLAN Requirements for Flexible Authentication
    • 1.1.4 Authentication Modes
    • 1.1.5 Tagged VM Client Support
    • 1.1.6 Static Authentication with MAC Authentication Filters
    • 1.1.7 Authentication Actions
      • 1.1.7.1 Authentication Timeout Action
    • 1.1.8 Authentication Session Limits on an Interface
    • 1.1.10 How Flexible Authentication Works
    • 1.1.11 Configuration Considerations and Guidelines for Flexible Authentication
  • 1.2 802.1X Authentication
    • 1.2.1 Device Roles in an 802.1X Configuration
    • 1.2.2 Communication Between the Devices
    • 1.2.3 Controlled and Uncontrolled Ports
    • 1.2.4 Port Control for Authentication
    • 1.2.5 Message Exchange During Authentication
      • 1.2.5.1 EAP Pass-Through Support
  • 1.3 MAC Authentication
    • 1.3.1 MAC Address Formats Sent to the RADIUS Server
    • 1.3.2 Authenticating Multiple Hosts Connected to the Same Port
    • 1.3.3 How Flexible Authentication Works for Multiple Clients
    • 1.3.4 Flexible Authentication Accounting
    • 1.3.5 Change of Authorization
    • 1.3.6 Multiple RADIUS Servers
    • 1.3.8 Session Aging
    • 1.3.9 Keepalive for MAC Authentication Clients
    • 1.3.10 Periodic Reauthentication of Authenticated Clients
    • 1.3.11 Denial of Service Protection Support
    • 1.3.12 SNMP Traps for Flexible Authentication
    • 1.3.13 Syslog Messages for Flexible Authentication
  • 1.4 RADIUS Attributes for Authentication and Accounting
  • 1.5 Configuring ICX Vendor-Specific Attributes on the RADIUS Server
  • 1.6 Support for the RADIUS User-Name Attribute in Access-Accept Messages
  • 1.7 Configuring the Host Location
  • 1.8 Dynamic VLAN Assignment
    • 1.8.1 Configuring the RADIUS Server to Support Dynamic VLAN Assignment for Authentication
    • 1.8.2 Authentication Success Scenarios
    • 1.8.3 Authentication Failure Scenarios
    • 1.8.4 Authentication Server Timeout Scenarios
    • 1.8.5 Authentication Client Timeout Scenarios (No Response to EAP Packets)
    • 1.8.6 Automatic Removal of Dynamic VLAN Assignments for 802.1X and MAC Authenticated Ports
  • 1.9 Dynamic ACLs in Authentication
    • 1.9.1 Dynamically Applying Existing ACLs in Flexible Authentication
      • 1.9.1.1 Configuration Guidelines for Dynamic ACLs Configured on an ICX Device
  • 1.10 Support for IP Source Guard Protection
  • 1.11 Configuring Flexible Authentication
    • 1.11.1 Flexible Authentication Configuration Prerequisites
    • 1.11.2 Configuring Flexible Authentication Globally
    • 1.11.3 Configuring Flexible Authentication on an Interface
    • 1.11.4 Enabling 802.1X Authentication
    • 1.11.5 Enabling MAC Authentication
    • 1.11.6 Excluding the RADIUS Server for Login Features
  • 1.12 Displaying Authentication Information
    • 1.12.1 Displaying Configuration
    • 1.12.2 Displaying Statistics
    • 1.12.3 Displaying the Authentication Sessions
    • 1.12.4 Displaying Information About User ACLs
    • 1.12.5 Displaying Dynamically Assigned VLAN Information
  • 1.13 Clearing Authentication Details