Configuring Access Guardian Bring Your Own Devices (BYOD) Overview
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-122
Port Bounce
A port bounce is used to terminate a user session and discard all associated session context for non-
supplicants. This is done by disabling and re-enabling the port and clearing any authentication state for the
devices on the port. A port bounce action is configurable through the unp redirect port-bounce
command.
• Port bounce is used for MAC authenticated non-supplicant users.
• On receipt of a Disconnect Request (DM) or Change of Authorization (CoA) message, the
OmniSwitch determines if the user needs to move or change VLANs.
• If the new UNP specifies a different VLAN ID, the port bouncing feature is enforced as per
configuration for non-supplicants.
• When a device changes VLANs and it is the only device on the port, the switch port is bounced to
ensure a clean reconnection and get the correct IP address through DHCP.
• Port bouncing is enforced only if the non-supplicant user is the only user on the port. Also if a CoA
message is received for a non-supplicant user and port bouncing is disabled globally but is enabled on
the port on which the non-supplicant user has been classified, then the port is bounced.
Pause Timer
The switch clears all authentication states of the device by pausing for a period of time. The value for this
period of time is configurable through the unp redirect pause-timer command.
When non-supplicant devices are detected, the switch must pause for some period of time before
redirection to the specified URLs. The pause mechanism is enforced when the following conditions are
met.
• COA message received by the switch indicates VLAN movement for the non-supplicant user, and
• Port bouncing is disabled for the user port or disabled globally for the switch.
The pause mechanism ensures that all traffic from the user is dropped until the global pause timer expires
and the corresponding user context is removed.
Note. The Port Bounce and Pause Timer functions apply only to non-supplicant devices. For supplicant
devices, there is no difference whether Port Bounce is enabled or Pause Timer is enabled. The user context
for supplicant devices is removed by triggering the re-authentication of the supplicant user and the device
moves into a new UNP profile and VLAN after re-authentication.
To Next Page
Loading...
