802.1X tasks at a glance

To configure 802.1X authentication, perform the following tasks:

1. Enabling 802.1X

2. Configuring basic 802.1X features

   • Enabling EAP relay or EAP termination

   • Setting the port authorization state

   • Specifying an access control method

   • (Optional.) Specifying a mandatory authentication domain on a port

   • (Optional.) Setting the 802.1X authentication timeout timers

   • (Optional.) Configuring 802.1X reauthentication

   • (Optional.) Setting the quiet timer

3. (Optional.) Configuring 802.1X VLAN assignment

   • Configuring an 802.1X guest VLAN

   • Enabling 802.1X guest VLAN assignment delay

   • Configuring an 802.1X Auth-Fail VLAN

   • Configuring an 802.1X critical VLAN

   • Enabling the 802.1X critical voice VLAN

4. (Optional.) Configuring 802.1X VSI assignment

   • Configuring an 802.1X guest VSI

   • Enabling 802.1X guest VSI assignment delay

   • Configuring an 802.1X Auth-Fail VSI

   • Configuring an 802.1X critical VSI

5. (Optional.) Configuring other 802.1X features

   • Configuring the authentication trigger feature

     Perform this task when 802.1X clients cannot initiate authentication.

   • Setting the maximum number of concurrent 802.1X users on a port

   • Setting the maximum number of authentication request attempts

   • Configuring online user handshake

   • Specifying supported domain name delimiters

   • Sending 802.1X protocol packets out of a port without VLAN tags

   • Setting the maximum number of 802.1X authentication attempts for MAC authenticated users

   • Enabling 802.1X user IP freezing

   • Configuring 802.1X MAC address binding

   • Configuring the EAD assistant feature

   • Enabling logging for 802.1X users