HP FlexNetwork 7500 Series, Справочник по командам

Страница: 237 / 738

222
mac-authentication parallel-with-dot1x
Use mac-authentication parallel-with-dot1x to enable parallel processing of MAC authentication
and 802.1X authentication on a port.
Use undo mac-authentication parallel-with-dot1x to restore the default.
Syntax
mac-authentication parallel-with-dot1x
undo mac-authentication parallel-with-dot1x
Default
Parallel processing of MAC authentication and 802.1X authentication is disabled on a port.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you configure this command on a port, follow these restrictions and guidelines:
•
Make sure the port meets the following requirements:

The port is configured with both 802.1X authentication and MAC authentication and
performs MAC-based access control for 802.1X authentication.

The port is enabled with the 802.1X unicast trigger.
•
For the port to perform MAC authentication before it is assigned to the 802.1X guest VLAN, use
the
dot1x guest-vlan-delay new-mac command to delay assigning the port to the 802.1X
guest VLAN.
For information about the dot1x guest-vlan-delay new-mac command, see "802.1X
commands."
•
Do not enable MAC authentication delay on the port. This operation will delay MAC
authentication after 802.1X authentication is triggered.
•
To configure both 802.1X authentication and MAC authentication on the port, use one of the
following methods:

Enable the 802.1X and MAC authentication features separately on the port.

Enable port security on the port. The port security mode must be userlogin-secure-or-mac
or userlogin-secure-or-mac-ext .
For information about port security mode configuration, see port security in Security
Configuration Guide .
Examples
# Enable parallel processing of MAC authentication and 802.1X authentication on
Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication parallel-with-dot1x
Related commands
display mac-authentication