Ignoring Authorization Information From The Server; Enabling Mac Move - HP MSR Series Configuration Manual

Step
3. Configure a secure
MAC address.
4. Enter Layer 2 Ethernet
interface view.
5. (Optional.) Enable
inactivity aging.
6. (Optional.) Enable the
dynamic secure MAC
feature.

Ignoring authorization information from the server

You can configure a port to ignore the authorization information received from the server (local or
remote) after an 802.1X or MAC authentication user passes authentication.
To configure a port to ignore authorization information from the server:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Ignore the authorization
information received from the
authentication server.

Enabling MAC move

MAC move allows 802.1X or MAC authenticated users to move between ports on a device. For
example, if an authenticated 802.1X user moves to another 802.1X-enabled port on the device, the
authentication session is deleted from the first port. The user is reauthenticated on the new port.
If MAC move is disabled and an 802.1X authenticated user moves to another port, the user is not
reauthenticated.
Hewlett Packard Enterprise recommends you enable MAC move for wireless users that roam
between ports to access the network.
To enable MAC move:
Command
•
In system view:
port-security mac-address
security [ sticky ] mac-address
interface interface-type
interface-number vlan vlan-id
•
In Layer 2 Ethernet interface view:
a. interface interface-type
interface-number
b. port-security mac-address
security [ sticky ] mac-address
vlan vlan-id
c. quit
interface interface-type
interface-number
port-security mac-address
aging-type inactivity
port-security mac-address dynamic
Command
system-view
interface interface-type
interface-number
port-security authorization
ignore
211
Remarks
By default, no secure MAC
address exists.
In a VLAN, a MAC address cannot
be specified as both a static
secure MAC address and a sticky
MAC address.
N/A
By default, the inactivity aging
feature is disabled.
By default, the dynamic secure
MAC feature is disabled. Sticky
MAC addresses can be saved to
the configuration file. Once saved,
they can survive a device reboot.
Remarks
N/A
N/A
By default, a port uses the
authorization information received
from the authentication server.