Flexible Authentication (802.1x Authentication, MAC Authentication and Web Authentication)

Feature ICX 7150 ICX 7150-ES ICX 7550 ICX 7650 ICX 7850 ICX 8100 ICX 8200
Flexible Authentication (FlexAuth) - 802.1x, MAC Authentication and WEB Authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
802.1x Authentication (Delete this line) 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
802.1x accounting 08.0.60 10.0.10d 08.0.95f 08.0.70 08.0.90 10.0.10f 10.0.00
802.1x with dynamic ACL assignment 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
802.1x with dynamic VLAN assignment 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
802.1x and MAC authentication on the same port 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
802.1x and sFlow: 802.1x user name export support for encrypted and non-encrypted EAP types 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for 802.1x authentication together with IP Source guard protection 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for 802.1x together with Denial of Service (DoS) attack protection 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
MAC address filter override of 802.1x 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Periodic reauthentication for 802.1x 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for MAC Authentication together with IP Source guard protection 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for MAC Authentication together with Dynamic VLAN assignment 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for MAC Authentication together with Dynamic ACLs 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for MAC Authentication together with 802.1x 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Automatic removal of Dynamic VLAN for MAC authenticated ports 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
SNMP Traps for MAC authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Specifying the format of the MAC addresses sent to the RADIUS server 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Periodic reauthentication for MAC Authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Interim RADIUS accounting updates for 802.1x authentication and MAC authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Accounting for 802.1x and MAC authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Enabling and disabling Web Authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Configuring the Web Authentication mode 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Web Authentication options 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Web Authentication user ID and password customization 09.0.10a 10.0.10d 09.0.10a 09.0.10a 09.0.10a 10.0.10f 10.0.00
External Captive Portal with Aruba ClearPass 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
External Captive Portal with Cloudpath 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
External Captive Portal with Cisco ISE 08.0.61 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Configurable URL for External Web Authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Redirect URL in Web Authentication by RADIUS 10.0.10g_cd1 10.0.10g_cd1 10.0.10g_cd1 10.0.10g_cd1 10.0.10g_cd1 10.0.10g_cd1 10.0.10g_cd1
Dynamic ACLs in Web Authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
RADIUS returned VLAN support for Web Authentication clients (network segmentation) 09.0.10d1 10.0.10d 08.0.95 09.0.10d1 09.0.10d1 10.0.10f 10.0.10
Customize Web Authentication login page 09.0.10d1 10.0.10d 09.0.10d1 09.0.10d1 09.0.10d1 10.0.10f 10.0.10
Enabling and disabling Web Authentication 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Configuring the Web Authentication mode 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Web Authentication options 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Web Authentication user ID and password customization 09.0.10a 10.0.10d 09.0.10a 09.0.10a 09.0.10a 10.0.10f 10.0.00
External Captive Portal with Aruba ClearPass 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
External Captive Portal with Cloudpath 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
External Captive Portal with Cisco ISE 08.0.61 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for Flexible Authentication together with Dynamic ARP inspection (IPv4 and IPv6) with dynamic ACLs 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for Flexible authentication together with DHCPv4 and DHCPv6 snooping with dynamic ACLs 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Flexible authentication enhancements:
  • Critical Voice VLAN
  • Reauthentication with dead RADIUS server
  • Multiple IPv6 addresses with dynamic ACLs
  • Additional RADIUS attributes (including idle timeout, accounting terminate cause)
  • Colon-separated MAC address format for MAC authentication
08.0.61 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Authenticating multiple MAC addresses on an interface 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Aging time for blocked MAC addresses 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Outbound dynamic IPv4 ACLs and IPv6 ACLs 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Support for RUCKUS Cloudpath policy server 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Aruba ClearPass support 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
RUCKUS Cloudpath support 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Cisco ISE support 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
Downloadable ACLs sent from a RADIUS server No No 10.0.00 10.0.00 10.0.00 10.0.10f 10.0.00
Expanded maximum VLANs (32) in Tunnel-Private-Group-ID No No 10.0.00 10.0.00 10.0.00 10.0.10f 10.0.00
EAP pass-through support 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
RADIUS timeout action 08.0.60 10.0.10d 08.0.95 08.0.70 08.0.90 10.0.10f 10.0.00
FlexAuth LLDP Override MAC Authentication 10.0.10h_cd1 10.0.10h_cd1 10.0.10h_cd1 10.0.10h_cd1 10.0.10h_cd1 10.0.10h_cd1 10.0.10h_cd1
  1. As an exception FastIron release 10.0.00 and subsequent patches do not support this feature. However, FastIron release 10.0.10 and later will support this feature. ↩