Configuring A Mac Authentication Guest Vlan; Configuration Prerequisites; Configuration Procedure - HP 5120 SI Series Security Configuration Manual

Configuring a MAC authentication guest VLAN

Configuration prerequisites

Before you configure a MAC authentication guest VLAN on a port, complete the following tasks:
Enable MAC authentication.
•
• Enable MAC-based VLAN on the port.
Create the VLAN to be specified as the MAC authentication guest VLAN.
•

Configuration procedure

Follow these steps to configure a MAC authentication guest VLAN:
To do...
Enter system view
Enter Layer 2 Ethernet
interface view
Configure a MAC
authentication guest VLAN
Follow the guidelines in
Table 10 Relationships of the MAC authentication guest VLAN with other security features
Feature
MAC authentication quiet
function
Port intrusion protection
802.1X guest VLAN on a
port that performs
MAC-based access
control
NOTE:
When global MAC authentication is enabled, the EAD fast deployment function cannot take effect. For
more information about the EAD fast deployment function, see the chapter "EAD fast deployment
configuration."
Use the command...
system-view
interface interface-type
interface-number
mac-authentication guest-vlan
guest-vlan-id
Table 10 when configuring a MAC authentication guest VLAN on a port.
Relationship description
The MAC authentication guest VLAN
function has higher priority. A user can
access any resources in the guest VLAN.
The MAC authentication guest VLAN
function has higher priority than the block
MAC action but lower priority than the shut
down port action of the port intrusion
protection feature.
The MAC authentication guest VLAN has a
lower priority.
100
Remarks
—
—
Required
By default, no MAC authentication
guest VLAN is configured.
You can configure only one MAC
authentication guest VLAN on a
port.
Reference
MAC authentication timers
The chapter "Port security
configuration"
The chapter "802.1X
configuration"