topic Wired Port Authentication Questions in Network Access Control https://community.cisco.com/t5/network-access-control/wired-port-authentication-questions/m-p/1939587#M202683 <HTML><HEAD></HEAD><BODY><P> No. You need "multi-domain" mode. Multi-domain means it will allow only one host in data vlan and only one host in voice vlan. It will allow the use of "downloadable ACL".</P><P></P><P>Please rate if it helps.</P></BODY></HTML> Sun, 13 May 2012 02:10:25 GMT Eduardo Aliaga 2012-05-13T02:10:25Z Wired Port Authentication Questions https://community.cisco.com/t5/network-access-control/wired-port-authentication-questions/m-p/1939586#M202682 <P>Hi all,</P><P></P><P>I have been reading article <A href="http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1430161" target="_blank">http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1430161</A> and I am trying to get my head around the type of port authentication Methods &amp; Modes I am going to require for a Proof of Concept using a Cisco ISE as the Authentication Server.</P><P></P><P>The switchport will have a single IP Phone in a Voice VLAN and then a Single host in a Data VLAN. Reading this article, I think I should be configuring "802.1x" authentication method using "Single Host" Mode.</P><P></P><P>However will that support a Downloadable ACL dependant on the user credentials? And will it allow a restricted ACL to be downloaded if authentication of the Machine or the User fails.? I dont really want to create &amp; manage Guest &amp; Remediation VLANs with thier respective ACLs on every switch in my enterprise, including our remote branch offices.</P><P></P><P>Hope that makes kinda sense.</P><P></P><P>Mario</P> Mon, 11 Mar 2019 02:04:36 GMT https://community.cisco.com/t5/network-access-control/wired-port-authentication-questions/m-p/1939586#M202682 marioderosa2008 2019-03-11T02:04:36Z Wired Port Authentication Questions https://community.cisco.com/t5/network-access-control/wired-port-authentication-questions/m-p/1939587#M202683 <HTML><HEAD></HEAD><BODY><P> No. You need "multi-domain" mode. Multi-domain means it will allow only one host in data vlan and only one host in voice vlan. It will allow the use of "downloadable ACL".</P><P></P><P>Please rate if it helps.</P></BODY></HTML> Sun, 13 May 2012 02:10:25 GMT https://community.cisco.com/t5/network-access-control/wired-port-authentication-questions/m-p/1939587#M202683 Eduardo Aliaga 2012-05-13T02:10:25Z