To Next Page

To Previous Page

200

Performing MAC authentication

macAddressWithRadius: A port in this mode performs MAC authentication and services multiple users.

Performing a combination of MAC authentication and 802.1X authentication

• macAddressOrUserLoginSecure

This mode is the combination of the macAddressWithRadius and userLoginSecure modes.

For wired users, the port performs MAC authentication upon receiving non-802.1X frames and

performs 802.1X authentication upon receiving 802.1X frames.

• macAddressOrUserLoginSecureExt

This mode is similar to the macAddressOrUserLoginSecure mode except that a port in this mode

supports multiple 802.1X and MAC authentication users.

• macAddressElseUserLoginSecure

This mode is the combination of the macAddressWithRadius and userLoginSecure modes, with

MAC authentication having a higher priority as the Else keyword implies.

For wired users, the port performs MAC authentication upon receiving non-802.1X frames and

performs MAC authentication and then, if the authentication fails, 802.1X authentication upon

receiving 802.1X frames.

• macAddressElseUserLoginSecureExt

This mode is similar to the macAddressElseUserLoginSecure mode except that a port in this mode

supports multiple 802.1X and MAC authentication users as the keyword Ext implies.

NOTE:

n OUI, as defined by the IEEE, is the first 24 bits of the MAC address, which uniquely identifies a device

endor.

Working with guest VLAN and Auth-Fail VLAN

An 802.1X guest VLAN is the VLAN that a user is in before initiating authentication. An 802.1X Auth-Fail

VLAN or a MAC authentication guest VLAN is the VLAN that a user is in after failing authentication.

Support for the guest VLAN and Auth-Fail VLAN features varies with security modes.

• You can use the 802.1X guest VLAN and 802.1X Auth-Fail VLAN features together with port security

modes that support 802.1X authentication. For more information about the 802.1X guest VLAN and

Auth-Fail VLAN on a port that performs MAC-based access control, see "Configuring 802.1X."

• Y

ou can use the MAC authentication VLAN feature together with security modes that support MAC

authentication. For more information about the MAC authentication guest VLAN, see "Configuring

C authentication."

• If you configure both an 802.1X Auth-Fail VLAN and a MAC authentication guest VLAN on a port

that performs MAC-based access control, the 802.1X Auth-Fail VLAN has a higher priority.

Configuration task list

Task Remarks

Enabling port security Required.

HP 3600 v2 Series Configuration Guide

Other manuals for HP 3600 v2 Series