802.1X authentication with EVPN-VXLAN

Devices that act as access switches can use 802.1X authentication to protect an EVPN-VXLAN network from unauthorized end devices. Devices support the following 802.1X authentication features on access and trunk ports:

• Access ports: single, single-secure, and multiple supplicant modes
• Trunk ports: single and single-secure supplicant modes
• Guest VLAN
• Server fail
• Server reject
• Dynamic VLAN
• Dynamic firewall filters
• RADIUS accounting
• Port bounce with Change of Authorization (CoA) requests
• MAC RADIUS client authentication
• Central Web Authentication (CWA) with redirect URL
• Captive portal client authentication
• Flexible authentication with fallback scenarios