Configuration Procedure; Configuring A Mac Authentication Guest Vsi; Configuration Restrictions And Guidelines; Configuration Prerequisites - HPE FlexNetwork 10500 Series Security Configuration Manual

For information about voice VLANs, see Layer 2—LAN Switching Configuration Guide.

Configuration procedure

To enable the MAC authentication critical voice VLAN feature on a port:
Step
1. Enter system view.
2. Enter interface view.
3. Enable the MAC
authentication critical voice
VLAN feature on a port.

Configuring a MAC authentication guest VSI

Configuration restrictions and guidelines

When you configure the MAC authentication guest VSI on a port, follow these restrictions and
guidelines:
•
The MAC authentication guest VSI feature has higher priority than the quiet feature of MAC
authentication. When a user fails MAC authentication, the user can access the resources in the
guest VSI. The user's MAC address is not marked as a silent MAC address.
•
You can configure only one MAC authentication guest VSI on a port. The MAC authentication
guest VSIs on different ports can be different.

Configuration prerequisites

Before you configure the MAC authentication guest VSI on a port, complete the following tasks:
•
Enable L2VPN.
•
Create the VSI to be specified as the MAC authentication guest VSI, and create a VXLAN for
the VSI.
•
Enable MAC-based traffic match mode for dynamic ACs on the port.
For more information, see VXLAN Configuration Guide.
Configuration procedure
To configure the MAC authentication guest VSI on a port:
Step
1. Enter system view.
2. Enter interface view.
3. Specify the MAC
authentication guest VSI
on the port.
Command
system-view
interface interface-type
interface-number
mac-authentication
critical-voice-vlan
Command
system-view
interface interface-type
interface-number
mac-authentication
guest-vsi guest-vsi-name
152
Remarks
N/A
N/A
By default, the MAC
authentication critical voice VLAN
feature is disabled on a port.
Remarks
N/A
N/A
By default, no MAC authentication guest
VSI exists.