• If you overwrite the running configuration of interfaces with a configuration file loaded in flash, some ports may fail to authenticate the endpoints. • Reauthentication using SNMP MIB is not supported for 802.1x and MAC authentication bypass (MAB) authentication. Information About IEEE 802.1x Port-Based Authentication The 802.1x standard defines a client-server-based access control and authentication protocol that prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN.
TACACS is not supported with 802.1x authentication. Note Until the client is authenticated, 802.1x access control allows only Extensible Authentication Protocol over LAN (EAPOL), Cisco Discovery Protocol, and Spanning Tree Protocol (STP) traffic through the port to which the client is connected. After authentication is successful, normal traffic can pass through the port. The table shown below lists the maximum number of session each client supports:
Overview of IEEE 802.1x Port-Based Authentication The 802.1x standard defines a client-server-based access control and authentication protocol that prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN. TACACS is not supported with 802.1x authentication.
Note Configuring IEEE 802.1x Port-Based Authentication Information About IEEE 802.1x Port-Based Authentication Client session Maximum sessions supported Maximum dot1x or MAB client sessions 2000 Maximum web-based authentication sessions 2000 Maximum dot1x sessions with critical-auth VLAN enabled and server re-initialized 2000 Maximum MAB sessions with various session features applied 2000 Maximum dot1x sessions with service templates or session features applied 2000 Configuring IEEE 802.1x Port-Based Authentication 2