C613-50631-01 Rev A Command Reference for IE340 Series 2243
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
AUTHENTICATION COMMANDS
AUTH
ROAMING ENABLE
auth roaming enable
Overview Use this command to allow a supplicant to move to another authenticating
interface without reauthentication, providing the link is up for the interface that
the supplicant is currently connected to.
The no variant of this command disables roaming authentication on an interface,
and forces a supplicant to be reauthenticated when moving between interfaces.
See the AAA and Port Authentication Feature Overview and Configuration Guide
for further information about this feature.
Syntax
auth roaming enable
no auth roaming enable
Default Roaming authentication is disabled by default.
Mode Interface Configuration for a static channel, a dynamic (LACP) channel group, or a
switch port; or Authentication Profile mode.
Usage notes Note that 802.1X port authentication, MAC authentication, or web-based
authentication must be configured before using this feature. The port that the
supplicant is moving to must have the same authentication configuration as the
port the supplicant is moving from.
This command only enables roaming authentication for links that are up. If you
want roaming authentication on links that are down, you must also use the
command auth roaming disconnected.
Roaming Authentication cannot be enabled if DHCP snooping is enabled (service
dhcp-snooping command), and vice versa.
Examples To enable roaming authentication for port1.0.4, when using auth-mac
authentication, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.4
awplus(config-if)# auth-mac enable
awplus(config-if)# auth roaming enable
To disable roaming authentication for port1.0.4, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.4
awplus(config-if)# no auth roaming enable
To enable roaming authentication for authentication profile ‘student’, use the
commands:
awplus# configure terminal
awplus(config)# auth profile student
awplus(config-auth-profile)# auth roaming enable