Alaxala AX1250S Software Manual page 391

Impact on communication
Regardless of the configuration of this command, the following packets are able to pass
through even before authentication.

IP packets destined for the Web authentication IP address

DHCP packets destined for the internal DHCP server used in Web authentication
dynamic VLAN mode
Other packets are handled according to the access list conditions set by using this
command.
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. One access list name can be set for a Switch by using this command.
2. When setting this command, you must set one of the following commands for the
applicable port in advance:

dot1x port-control

web-authentication port

mac-authentication port
3. When you use authentication IPv4 access list for IEEE 802.1X port-based
authentication (static), note the following:

If
extended-authentication
command was set, this command cannot be set. (This command can be set if
the
4. Interfaces that can be set for the
depending on the authentication functionality.

IEEE 802.1X port-based authentication (static) can be set for Ethernet
interfaces and port channel interfaces.

IEEE 802.1X port-based authentication (dynamic), Web authentication, and
MAC-based authentication can be set only for Ethernet interfaces.
Related commands
dot1x system-auth-control
dot1x port-control
web-authentication system-auth-control
web-authentication port
web-authentication redirect enable
mac-authentication system-auth-control
mac-authentication port
ip access-list extended
system function command was not set.)
was not set when the
authentication ip access-group
authentication ip access-group
system function
command vary
367