Mac-Authentication Parallel-With-Dot1X - HP FlexNetwork 7500 Series Command Reference Manual

mac-authentication parallel-with-dot1x

Use mac-authentication parallel-with-dot1x to enable parallel processing of MAC authentication
and 802.1X authentication on a port.
Use undo mac-authentication parallel-with-dot1x to restore the default.
Syntax
mac-authentication parallel-with-dot1x
undo mac-authentication parallel-with-dot1x
Default
Parallel processing of MAC authentication and 802.1X authentication is disabled on a port.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you configure this command on a port, follow these restrictions and guidelines:
•
Make sure the port meets the following requirements:
The port is configured with both 802.1X authentication and MAC authentication and

performs MAC-based access control for 802.1X authentication.
The port is enabled with the 802.1X unicast trigger.

•
For the port to perform MAC authentication before it is assigned to the 802.1X guest VLAN, use
the dot1x guest-vlan-delay new-mac command to delay assigning the port to the 802.1X
guest VLAN.
For information about the dot1x guest-vlan-delay new-mac command, see "802.1X
commands."
•
Do not enable MAC authentication delay on the port. This operation will delay MAC
authentication after 802.1X authentication is triggered.
•
To configure both 802.1X authentication and MAC authentication on the port, use one of the
following methods:
Enable the 802.1X and MAC authentication features separately on the port.

Enable port security on the port. The port security mode must be userlogin-secure-or-mac

or userlogin-secure-or-mac-ext.
For information about port security mode configuration, see port security in Security
Configuration Guide.
Examples
# Enable
Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication parallel-with-dot1x
Related commands
display mac-authentication
parallel processing of MAC authentication
222
and 802.1X authentication on