Enabling parallel processing of MAC authentication and 802.1X authentication

About parallel processing of MAC authentication and 802.1X authentication

This feature enables a port that processes MAC authentication after 802.1X authentication is finished to process MAC authentication in parallel with 802.1X authentication.

Make sure the port meets the following requirements:

When the port receives a packet from an unknown MAC address, it sends a unicast EAP-Request/Identity packet to the MAC address. After that, the port immediately processes MAC authentication without waiting for the 802.1X authentication result.

After MAC authentication succeeds, the port is assigned to the MAC authentication authorization VLAN.

The process sequence of 802.1X authentication and MAC authentication is configurable in other ways. For the port to perform MAC authentication before it is assigned to the 802.1X guest VLAN or guest VSI, enable new MAC-triggered 802.1X guest VLAN or VSI assignment delay. For information about new MAC-triggered 802.1X guest VLAN or VSI assignment delay, see "Configuring 802.1X."

Restrictions and guidelines

To configure both 802.1X authentication and MAC authentication on the port, use one of the following methods:

For the parallel processing feature to work correctly, do not enable MAC authentication delay on the port. This operation will delay MAC authentication after 802.1X authentication is triggered.

Procedure

  1. Enter system view.

    system-view

  2. Enter interface view.

    interface interface-type interface-number

  3. Enable parallel processing of MAC authentication and 802.1X authentication on the port.

    mac-authentication parallel-with-dot1x

    By default, this feature is disabled.