Port-based MAC authentication allows an infrastructure device to be authenticated with a port-based policy that dictates the distribution switch to open the authenticator port to all clients from the authenticated device. This is similar to the existing port-based 802.1X authentication available on switches, except that the port-based 802.1X authentication can also be statically configured on an authenticator port to be persistent over port toggling and switch reboot, while the port-based mode MAC authentication will be dynamic, triggered by the dynamic policy an authenticated client will receive.