Cisco 2950T 24 Migration Guide - Page 21

Network Admission Control Framework Deployment Options, LAN Port IP LPIP, LAN Port 802.1X Basic

Page 21 highlights

Network Admission Control Framework Deployment Options LAN Port IP (LPIP) Switch Models Credentials Trigger Enforcement Policy Client Requirements Catalyst 3750 and Catalyst 3560 Carries credentials inside EAPoUDP, completely independent of any user authentication Triggered by ARP or DHCP traffic from the host RADIUS IP Downloadable ACLs Can be used with or without CTA (clientless host) LAN Port 802.1X Basic (LP1X) Catalyst 3750, Catalyst 3560 and Catalyst 2960 Carries credentials inside EAPoL along with user authentication Triggered by normal 802.1X exchange RADIUS VLAN Assignment Requires an enhanced supplicant with CTA built-in Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 21

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25

© 2006 Cisco Systems, Inc. All rights reserved.
Cisco Confidential
Presentation_ID
21
Network Admission Control Framework
Deployment Options
LAN Port IP (LPIP)
LAN Port 802.1X Basic
(LP1X)
Switch Models
Credentials
Trigger
Enforcement
Policy
Client
Requirements
Catalyst 3750 and
Catalyst 3560
Catalyst 3750, Catalyst 3560 and
Catalyst 2960
Carries credentials inside
EAPoUDP, completely
independent of any user
authentication
Carries credentials inside EAPoL
along with user authentication
Triggered by ARP or DHCP
traffic from the host
Triggered by normal 802.1X
exchange
RADIUS IP Downloadable
ACLs
RADIUS VLAN Assignment
Can be used with or without
CTA (clientless host)
Requires an enhanced supplicant
with CTA built-in