Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Supporting multi-authentication methods from a single switch port?

This thread has been viewed 1 times

  • 1.  Supporting multi-authentication methods from a single switch port?

    Posted Apr 04, 2012 06:49 PM

    Wondering what options we have with the Mobility Switches around supporting wired dot1x with CP fall back from a single switch port?  The scenario would involve a dumb switch hung off a single switch port with a need to support dot1x and CP services simultaneously.



  • 2.  RE: Supporting multi-authentication methods from a single switch port?

    Posted Apr 04, 2012 08:42 PM

    The tunneled-node feature available on the Aruba mobility switche - S3500 can do what you are looking for. A single port can be used for 802.1x auth, mac auth and captive portal.

    But if your looking to hang a dumb switch to a  s3500 and use multiple-authentications for users on the ports of the dumb switch, then i am not sure. 

     

    Regards,

    Sathya



  • 3.  RE: Supporting multi-authentication methods from a single switch port?

    Posted Apr 05, 2012 12:19 AM

    As long as the dump switch does not drop the EAP packets for dot1x,  dot1x authentication with CP fallback will work with tunneled-node.

     



  • 4.  RE: Supporting multi-authentication methods from a single switch port?

    Posted Apr 05, 2012 12:06 PM

    There was a typo in the last message, it should be "dumb switch" instead of "dump switch" as: 

    As long as the dumb switch does not drop the EAP packets for dot1x, dot1x authentication with CP fallback will work with tunneled-node.