Wired Intelligent Edge (Campus Switching and Routing)

 View Only
last person joined: one year ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of HPE Aruba Networking switching devices, and find ways to improve security across your network.

How To Configure 1920S For MAC And 802.1X Authentication 

Mar 20, 2020 05:03 PM

Requirement:

1920S MAC and 802.1x Authtication with Auto detect - The requirement is for the switch to auto-detect 802.1x or macAuthentication



Solution:

There are two options in the Authticator option Control mode settings in 1920S WeB GUI.

  • Auto is used for 802.1x authentication only. With the Auto setting, once a client authenticates it opens the port to subsequent clients (no auth required). The implementation is analogous to Cisco Dot1x Multi-host mode.
    • “Auto” does not automatically detect the client type and choose between macAuth and .1x authentication

 

  • MAC based is used to authenticate based on each mac address that connects to the port:
    • If a .1x aware client is attached, the switch uses .1x authentication
    • If a non .1x aware client is attached, the switch used macAuth

MAC based is also used for the pc attached to phone use case



Configuration:

As per the below Goto -> Authticator option and then Select Control Mode -> MAC based, By default the control mode is set to AUTO

 

 

 

  • If the requirement for the switch to auto-detect 802.1x or macAuthentication, then the proper settings are:
    • Control Mode = MAC Based
    • MAC Authentication mode = enabled

 



Verification

Attach the phone and the PC to the port where the Control mode setting is configured as MAC BASED, it will auto detect and authenticate both phone and the PC.

If the control mode setting is set to AUTO then only the client with 801.x will authenticate.

Statistics
0 Favorited
1 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.