802.1x backup solution for local AAA?

[CSCO11733516]

So I've decided to utilize 802.1x on a switch module on a 2901, reasons being for mobility for a laptop and network security.

However, the 802.1x authentication occurs over the VPN Tunnel (over the Internet).  What our concern is, what happens if the Internet or Tunnel goes down?  I know that 802.1x does not authenticate against the IOS local DB, so what would be another option in case this scenario happened?

There will only be one device authenticating (maybe 2) and they are 2 HP Windows 7 laptops.

Thanks in advance!

[shekharmore003]

You can use following command.

authentication event server dead action reinitialize vlan (vlan-id)

This command means if the ISE server in not reachable then that perticular port of the switch fall in to the specified VLAN.

[CSCO11733516]

Shek-

  Thanks for the quick response, would that mean that no authentication would occur and the client would just be allowed to utilize the port on the specifiedVLAN?

[shekharmore003 · Accepted solution]

Yes

[CSCO11733516]

Thanks for your help!

Sent from Cisco Technical Support iPhone App