Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I know that VLAN maps have no bidirection. Is there any other way to do bidirection access-list between VLAN?The goal scenario:Host A on VLAN 2, host B on VLAN 3. Host A should be able to open port on host B, but host B should not be able to open por...
Hi all,I'm implementing 802.1x using Catalyst 3560 and MS IAS as radius server. The plan is, every PC needs to authenticate using PEAP with radius and assigned to a VLAN. Fail authentication will be assigned to guest VLAN.The problem is when I'm test...
Hi Mark,Thanks for you reply.The routing device is the 3560 itself. I enable ip routing and the VLAN interfaces is directly connected due to at the same device. I had try to use ip access-list to VLAN interface, it seems didn't work.
Hi jafrazie,Thanks again for your explanations.With the new IOS, it looks fine now. Auth-fail definitely a good feature compare to previous limited dot1x commands.With my problem, I'm sure auth timeout is not the one that block the machine, I did let...
Hi jafrazieThank you for your reply.Seem my IOS 12.2-25(SEB4) didn't support dot1x auth-fail. I need to update my IOS first and let you up-to-date.Anyway, is there any command to refresh dot1x interface status or do you have any idea what makes the s...
