Mac Authentication Control - Enterasys 6E2xx Local Management User’s Manual

Table 3-5 MAC / 802.1X Precedence States (Continued)
802.1X MAC
Port Port
Control Control
Force Enabled
Unauthori-
zation
Force Disabled
Unauthori-
zation
3.6.4

MAC Authentication Control

This global variable can be set to enabled or disabled.
If set to enabled, then
a. MAC Authentication is active on those ports whose individual port-enabled variable is set to
enabled.
b. All session and statistic information is reset to defaults.
c. Any MAC addresses currently locked to ports are unlocked.
If set to disabled, then
a. MAC Authentication stops for all ports.
b. All active sessions are terminated with the cause portAdminDisabled.
c. All policies are applied to ports as a result of a MAC Authentication reverting to the ports
default policy, if any.
d. All ports currently authenticated using 802.1X, are unaffected.
e. Any 802.1X ports, which were set to forced-unauth, revert back to discarding all frames
regardless of the MAC Authentication state.
Default
Authen- Policy
ticated? Exists?
No No
Don't Don't
Care Care
Overview of Security Methods
Autho-
rized
Policy
Exists? Action
•
Don't MAC performs authentication.
Care
•
Frames are discarded.
•
Don't Neither method performs
Care authentication.
•
Frames are discarded.
Accessing Local Management 3-25