Done a lot of searching and cant seem to find what i'm looking for.
I have an Aruba 2920 switch and have this setup and configured for 802.1X. I have specific devices in my environment that i'd like to bypass this on an 802.1X enabled port.
My setup on a port is as follows:
aaa port-access authenticator 1/4aaa port-access authenticator 1/4 client-limit 2aaa port-access authenticator 1/4 tx-period 10aaa port-access authenticator 1/4 server-timeout 10aaa port-access authenticator 1/4 max-requests 5aaa port-access authenticator 1/4 reauth-period 3600aaa port-access authenticator 1/4 unauth-period 10
aaa port-access mac-based 1/4aaa port-access mac-based 1/4 addr-limit 2aaa port-access mac-based 1/4 max-requests 5aaa port-access mac-based 1/4 reauth-period 3600aaa port-access mac-based 1/4 unauth-period 10aaa port-access mac-based 1/4 unauth-vid 70aaa port-access 1/4 controlled-direction in
How do i configure a specific mac address to bypass this and not be chucked in the unauth vlan?
are you using Aruba ClearPass as your RADIUS server for MAC auth?
The feature you are looking for is called "Local MAC Authentication (LMA)" and can be found in the "Aruba 2920 Access Security Guide for AOS-S Switch 16.10".
check chapter 7 in the security guide
© Copyright 2023 Hewlett Packard Enterprise Development LPAll Rights Reserved.