Mac-Based Vlans; Mac-Based Vlan Overview; Static And Dynamic Hosts - Brocade Communications Systems ICX 6650 Security Configuration Manual

MAC-based VLANs

Table 44
These features are supported in the Layer 2, base Layer 3, edge Layer 3, and full Layer 3 software
images, except where explicitly noted.
TABLE 44
Feature
MAC-Based VLANs:
•
•
MAC-based VLANs and 802.1X security on
the same port
MAC-based VLAN aging
Dynamic MAC-Based VLANs

MAC-based VLAN overview

The MAC-based VLAN feature controls network access by authenticating a host source MAC
address, and mapping the incoming packet source MAC to a VLAN. Mapping is based on the MAC
address of the end station connected to the physical port. Users who relocate can remain on the
same VLAN as long as they connect to any switch in the same domain, on a port which is permitted
in the VLAN. The MAC-based VLAN feature may be enabled for two types of hosts: static and
dynamic.
MAC-based VLAN activity is determined by authentication through a RADIUS server. Incoming traffic
that originates from a specific MAC address is forwarded only if the source MAC address-to-VLAN
mapping is successfully authenticated. While multi-device port authentication is in progress, all
traffic from the new MAC address will be blocked or dropped until the authentication succeeds.
Traffic is dropped if the authentication fails.

Static and dynamic hosts

Static hosts are devices on the network that do not speak until spoken to. Static hosts may not
initiate a request for authentication on their own. Such static hosts can be managed through a link
up or link down notification.
Dynamic hosts are "chatty" devices that generate packets whenever they are in the link up state.
Dynamic hosts must be authenticated before they can switch or forward traffic.
Brocade ICX 6650 Security Configuration Guide
53-1002601-01
lists the MAC-based VLAN features that are supported on Brocade ICX 6650 device.
Supported MAC-based VLAN features
Source MAC address authentication
Policy-based classification and
forwarding
Brocade ICX 6650
Yes
Yes
Yes
Yes
Chapter
8
211