Re: 802.1x with ACL

From: Edouard Zorrilla (ezorrilla@tsf.com.pe)
Date: Tue Jan 27 2009 - 10:16:56 ARST


I guess so Sir.

Let me lab it up to see if that is necesary with downloadable acls.

Regards

----- Original Message -----
From: "sushil menon" <sushilmenon2001@gmail.com>
To: "Edouard Zorrilla" <ezorrilla@tsf.com.pe>
Cc: "Sadiq Yakasai" <sadiqtanko@gmail.com>; <security@groupstudy.com>;
<ccielab@groupstudy.com>
Sent: Tuesday, January 27, 2009 7:11 AM
Subject: Re: 802.1x with ACL

> Hi mate thanks but do u think it would be required for downloadable acls i
> doubt it. cause i think when we are using downloadable acls we are not
> using
> the Cisco VSA attributes.,
>
> regards
>
> sushil
>
> On Tue, Jan 27, 2009 at 4:03 PM, Edouard Zorrilla
> <ezorrilla@tsf.com.pe>wrote:
>
>> Yes Sir,
>>
>> You need it. It is inside the Cisco Doc. Yust take a look at this:
>>
>>
>> http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.2_25_see/configuration/guide/swauthen.html#wpxref83693
>>
>> Regards
>>
>>
>> ----- Original Message -----
>> *From:* sushil menon <sushilmenon2001@gmail.com>
>> *To:* Edouard Zorrilla <ezorrilla@tsf.com.pe>
>> *Cc:* Sadiq Yakasai <sadiqtanko@gmail.com> ; security@groupstudy.com ;
>> ccielab@groupstudy.com
>> *Sent:* Tuesday, January 27, 2009 6:55 AM
>> *Subject:* Re: 802.1x with ACL
>>
>> Hi all i have used ip acl with dot.1x before on 3550 switches but i
>> don;t
>> remember ever required to using the command mentioned by tyson.
>>
>> i have tried it with downloadable acls. but i am not sure with cisco
>> av-pairs. tyson can u please confirm on the same.
>>
>> regards
>>
>> sushil
>>
>> On Tue, Jan 27, 2009 at 3:22 PM, Edouard Zorrilla
>> <ezorrilla@tsf.com.pe>wrote:
>>
>>> Sadiq,
>>>
>>> Why do I need to enable "ip device traking",
>>>
>>> Regards
>>>
>>> ----- Original Message -----
>>> From: Sadiq Yakasai
>>> To: Edouard Zorrilla
>>> Cc: security@groupstudy.com ; ccielab@groupstudy.com
>>> Sent: Monday, January 26, 2009 6:44 PM
>>> Subject: Re: 802.1x with ACL
>>>
>>>
>>> Dont forget to glabally enable IP device tracking globally on the
>>> switch
>>> with the command <ip device tracking>.
>>>
>>> Sadiq
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:40 ARST