Hi,I'm securing some switchport utilising 802.1X and MAC authentication. ClearPass is being used to profile the MAC auth devices. Some of the MAC auth devices are Aruba AP and some of the AP broadcast a number of SSIDs which utilise different VLAN, hence the switchport the AP is patched into is configured as a trunk.This post shows how to do this for ArubaOS switches. Any tips on how to do this on Comware 7 switches? Or CX switches?Cheers
setting auth-mode = device-mode provides the ability that when the first client authentication on the port defines that access for all clients on that port. So, if there are additional clients on the same port, they 'piggyback' on the access of the first device. so in most cases, if we authenticate the Instant AP, we don't want the switch to authenticate clients that are connecting to the AP because the AP already authenticated them
© Copyright 2023 Hewlett Packard Enterprise Development LPAll Rights Reserved.