Enterasys Matrix DFE-Gold Series Configuration Guide 27-1
27
MultiAuth Configuration
ThischapterdescribestheMultiAuthsetofcommandsandhowtousethem.MultipleUser
MultipleAuthentication–allowsmultipleusersonagivenporttosimultaneouslyauthenticate
usinganyorallofthesupportedprotocols(MACAuthentication,PWA,802.1X,andCEP),andfor
eachauthenticatedusertoreceiveaunique
levelofnetworkaccess.
Configuring Multiple Authentication
About Multiple Authentication
Whenenabled,multipleauthenticationallowsmultipleuserstoauthenticateusinguptothree
methodsonthesameport,andreceiveapolicytrafficprofilebasedontheRADIUSconfiguration.
Whenmulti‐authenticationportshaveacombinationofauth enticationmethodsenabled,anda
userissuccessfullyauthenticatedinmorethanoneway
atthesametime,theprecedenceofthe
authenticationmethodswilldeterminewhichRADIUS‐returnedfilterIDwillbeprocessedand
resultinanappliedtrafficpolicyprofile.
DFE-Gold Multi-User Capacities
MatrixDFEGoldmodulessupportoneauthenticateduserandoneIPphoneperport.Thesystem
(chassis)supportsupto1024authenticatedusers.
Thenumberofauthenticatedusersallowedperportcanbecontrolledbymeansofthe set
multiauthportonpage 27‐6.
Purpose
Toconfiguremultipleauthentication.
Note: An Enterasys Feature Guide document that contains a complete discussion on authentication
configuration, including MultiAuth, exists at the following Enterasys web site: http://
www.enterasys.com/support/manuals/
Note: In order for multiple authentication to function on the device, each possible method of
authentication (MAC authentication, PWA, 802.1X) must be enabled globally and configured
appropriately on the desired ports per its corresponding command set as described in this chapter.
Multiple authentication mode must be globally enabled on the device using the set multiauth mode
command as described in “set multiauth mode” on page 27-2.