https://community.cisco.com/t5/network-access-control/migration-to-802-1x-authentication/m-p/716039#M421094 <P>Hi all, </P><P></P><P>I have a very large wired-only Ethernet network which I would like to migrate to 802.1x for stronger authentication of end users. The problem I have is that there are long chains of legacy switches which do not support 802.1x (the topology of the network is a complete tree of switches). As far as I know, 802.1x is port based. </P><P></P><P>So here is the issue: </P><P>- the replacement of all switches will take a very long time, but I would like to have all end users authenticated asap </P><P>- switches supporting .1x will initially only be located at the roots of the tree. There will still be legacy switches not supporting .1x between end users and newer switches. </P><P>- authentication of users on a port of a new switch will be shared between several end users. </P><P></P><P>Do you know if it possible to enable authentication of all users but having only enabled 802.1x in some more central locations first? </P><P></P><P>Cheers, </P><P></P> Sun, 10 Mar 2019 22:05:10 GMT benpak 2019-03-10T22:05:10Z https://community.cisco.com/t5/network-access-control/migration-to-802-1x-authentication/m-p/716039#M421094 <P>Hi all, </P><P></P><P>I have a very large wired-only Ethernet network which I would like to migrate to 802.1x for stronger authentication of end users. The problem I have is that there are long chains of legacy switches which do not support 802.1x (the topology of the network is a complete tree of switches). As far as I know, 802.1x is port based. </P><P></P><P>So here is the issue: </P><P>- the replacement of all switches will take a very long time, but I would like to have all end users authenticated asap </P><P>- switches supporting .1x will initially only be located at the roots of the tree. There will still be legacy switches not supporting .1x between end users and newer switches. </P><P>- authentication of users on a port of a new switch will be shared between several end users. </P><P></P><P>Do you know if it possible to enable authentication of all users but having only enabled 802.1x in some more central locations first? </P><P></P><P>Cheers, </P><P></P> Sun, 10 Mar 2019 22:05:10 GMT https://community.cisco.com/t5/network-access-control/migration-to-802-1x-authentication/m-p/716039#M421094 benpak 2019-03-10T22:05:10Z