MAC authentication tasks at a glance

To configure MAC authentication, perform the following tasks:

1. Enabling MAC authentication

2. Configure basic MAC authentication features

   • Specifying a MAC authentication domain

   • Configuring the user account format

   • (Optional.) Configuring MAC authentication timers

3. (Optional.) Configuring MAC authentication VLAN assignment

   • Configuring a MAC authentication guest VLAN

   • Configuring a MAC authentication critical VLAN

   • Enabling the MAC authentication critical voice VLAN

4. (Optional.) Configuring MAC authentication VSI assignment

   • Configuring a MAC authentication guest VSI

   • Configuring a MAC authentication critical VSI

5. (Optional.) Configuring other MAC authentication features

   • Enabling MAC authentication offline detection

   • Setting the maximum number of concurrent MAC authentication users on a port

   • Enabling MAC authentication multi-VLAN mode on a port

     Perform this task to not reauthenticate online users when VLAN changes occur on a port.

   • Configuring MAC authentication delay

   • Configuring periodic MAC reauthentication

   • Including user IP addresses in MAC authentication requests

   • Enabling parallel processing of MAC authentication and 802.1X authentication

   • Enabling logging for MAC authentication users