Configuration Procedure; Configuring The Keep-Online Feature; Enabling Mac Authentication Offline Detection - HPE FlexNetwork 5510 HI Series Security Configuration Manual

For information about voice VLANs, see Layer 2—LAN Switching Configuration Guide.

Configuration procedure

To enable the MAC authentication critical voice VLAN feature on a port:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Enable
authentication critical voice
VLAN feature on a port.

Configuring the keep-online feature

By default, the device logs off online MAC authentication users if no server is reachable for MAC
reauthentication. The keep-online feature keeps authenticated MAC authentication users online
when no server is reachable for MAC reauthentication.
In a fast-recovery network, you can use the keep-online feature to prevent MAC authentication users
from coming online and going offline frequently.
To configure the keep-online feature:
Step
1. Enter system view.
2. Enter
interface view.
3. Enable the keep-online feature
for
authentication users on the
port.

Enabling MAC authentication offline detection

IMPORTANT:
This feature is available in Release 1121 and later.
This feature logs a user out of the device if the device does not receive any packets from the user
within the offline detect timer. The device also requests to stop accounting for the user at the same
time. For more information about the offline detect timer, see
timers."
Disabling this feature disables the device from inspecting the online user status.
To enable MAC authentication offline detection:
Command
system-view
interface
interface-number
the MAC
mac-authentication
critical-voice-vlan
Layer 2 Ethernet
authenticated MAC
interface-type
Command
system-view
interface interface-type
interface-number
mac-authentication
re-authenticate
server-unreachable keep-online
114
Remarks
N/A
N/A
By default, the
authentication critical voice VLAN
feature is disabled on a port.
Remarks
N/A
N/A
By default, the keep-online
feature is disabled.
This command takes effect only
when the authentication server
assigns reauthentication
attributes to the device.
"Configuring MAC authentication
MAC