Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Can I enable 802.1x + mac auth in front of radius on the same VAP?

This thread has been viewed 0 times

  • 1.  Can I enable 802.1x + mac auth in front of radius on the same VAP?

    Posted Jul 01, 2012 02:40 PM

    Hi Guys,

    can I enable 802.1x + mac auth in front of radius on the same VAP?

    Is it possible.

    Config example or vrd containing the exact config will be helpful!

     

    Thanks in advance,

     

    Me.



  • 2.  RE: Can I enable 802.1x + mac auth in front of radius on the same VAP?

    Posted Jul 02, 2012 07:10 AM

    Hi,

    You should have a look under "Mixed Authentication Modes" in Aruba OS UG 6.1, page 323.

    There is a command in the AAA-profile called l2-auth-fail-through;

    "Use l2-auth-fail-through command to perform mixed authentication which includes both MAC and 802.1x authentication. When MAC authentication fails, enable the l2-auth-fail-through command to perform 802.1x authentication."