Cisco Catalyst 2960-X User Manual

profile on the AAA server or on the switch. To configure the directive on the AAA server, use the
authz-directive =<open/default> global command. To configure the directive on the switch, use the epm
access-control open global configuration command.
The default value of the directive is default.
Note
If a host falls back to web authentication on a port without a configured ACL:
•
If the port is in open authentication mode, the auth-default-ACL-OPEN is created.
•
If the port is in closed authentication mode, the auth-default-ACL is created.
The access control entries (ACEs) in the fallback ACL are converted to per-user entries. If the configured
fallback profile does not include a fallback ACL, the host is subject to the auth-default-ACL associated with
the port.
If you use a custom logo with web authentication and it is stored on an external server, the port ACL must
allow access to the external server before authentication. You must either configure a static port ACL or
change the auth-default-ACL to provide appropriate access to the external server.
Note
Cisco Secure ACS and Attribute-Value Pairs for the Redirect URL
The switch uses these cisco-av-pair VSAs:
•
url-redirect is the HTTP or HTTPS URL.
•
url-redirect-acl is the switch ACL name or number.
The switch uses the CiscoSecure-defined-ACL attribute value pair to intercept an HTTP or HTTPS request
from the end point. The switch then forwards the client web browser to the specified redirect address. The
url-redirect AV pair on the Cisco Secure ACS contains the URL to which the web browser is redirected. The
url-redirect-acl attribute value pair contains the name or number of an ACL that specifies the HTTP or HTTPS
traffic to redirect.
Note
•
Traffic that matches a permit ACE in the ACL is redirected.
•
Define the URL redirect ACL and the default port ACL on the switch.
If a redirect URL is configured for a client on the authentication server, a default port ACL on the connected
client switch port must also be configured
Cisco Secure ACS and Attribute-Value Pairs for Downloadable ACLs
You can set the CiscoSecure-Defined-ACL Attribute-Value (AV) pair on the Cisco Secure ACS with the
RADIUS cisco-av-pair vendor-specific attributes (VSAs). This pair specifies the names of the downloadable
ACLs on the Cisco Secure ACS with the #ACL#-IP-name-number attribute.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
282 OL-29048-01
Configuring IEEE 802.1x Port-Based Authentication
802.1x Authentication with Downloadable ACLs and Redirect URLs

Cisco Catalyst 2960-X Specifications

General

Console port	RJ-45
USB 2.0 ports quantity	2
SFP module slots quantity	4
Installed SFP modules quantity	-
Gigabit Ethernet (copper) ports quantity	48
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Power source	AC
Input current	5 A
AC input voltage	100 - 240 V
Power consumption (typical)	60.9 W
Number of power supply units	1
Redundant power supply (RPS) support	Yes
Operating altitude	0 - 3000 m
Non-operating altitude	0 - 4000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	-5 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Switching protocols	UDP, TCP, RADIUS/TACACS+
Number of VLANs	1023
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Throughput	107.1 Mpps
Jumbo frames	9216
Number of queues	8
MAC address table	16000 entries
Number of static routes	1000
DHCP features	DHCP server
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SNMP, SSH
Access Control List (ACL) rules	3
Switch type	Managed
Switch layer	L2/L3
Safety	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1
Form factor	1U
Product color	Black
Total Power over Ethernet (PoE) budget	370 W
Power over Ethernet (PoE) ports quantity	24
Power over Ethernet plus (PoE+) ports quantity	12
Memory type	DRAM
Noise level	39 dB
Flash memory	128 MB
Internal memory	512 MB
Processor frequency	600 MHz
Mean time between failures (MTBF)	276870 h

Weight and Dimensions

Depth	368 mm
Width	445 mm
Height	45 mm
Weight	5800 g