HP FlexFabric 5700 series User Manual

103
Table 10 shows the way that the network access device handles guest VLANs for MAC authentication
users.
Table 10 VLAN manipulation
Authentication status VLAN mani
p
ulation
A user in the MAC authentication
guest VLAN fails MAC
authentication for any other
reason than server unreachable.
The user is still in the MAC authentication guest VLAN.
A user in the MAC authentication
guest VLAN passes MAC
authentication.
The device remaps the MAC address of the user to the authorization VLAN
assigned by the authentication server.
If no authorization VLAN is configured for the user on the authentication
server, the device remaps the MAC address of the user to the PVID of the
port.
Critical VLAN
You can configure a MAC authentication critical VLAN on a port to accommodate users that fail MAC
authentication because no RADIUS authentication server is reachable. Users in a MAC authentication
critical VLAN can access only network resources in the critical VLAN.
The critical VLAN feature takes effect when MAC authentication is performed only through RADIUS
servers. If a MAC authentication user fails local authentication after RADIUS authentication, the user is
not assigned to the critical VLAN. For more information about the authentication methods, see
"Configuring AAA."
Ta
ble 11 shows the way that the network access device handles critical VLANs for MAC authentication
use
rs.
Table 11 VLAN manipulation
Authentication status VLAN manipulation
A user that has not been assigned to any VLAN
fails MAC authentication because all the
RADIUS servers are unreachable.
The device maps the MAC address of the user to the MAC
authentication critical VLAN.
The user is still in the MAC authentication critical VLAN if
the user fails MAC reauthentication because all the RADIUS
servers are unreachable.
A user in the MAC authentication critical VLAN
fails MAC authentication for any other reason
than server unreachable.
If a guest VLAN has been configured, the device maps the
MAC address of the user to the guest VLAN.
If no guest VLAN is configured, the device remaps the MAC
address of the user to the PVID of the port.
A user in the MAC authentication critical VLAN
passes MAC authentication.
The device remaps the MAC address of the user to the
authorization VLAN assigned by the authentication server.
If no authorization VLAN is configured for the user on the
authentication server, the device remaps the MAC address
of the user to the PVID of the access port.

HP FlexFabric 5700 series Specifications

General

Layer Support	L2/L3
Routing Protocol	OSPF, BGP, RIP, IS-IS, Static Routing
Remote Management Protocol	SNMP, CLI, Web
Features	VXLAN
Compliant Standards	IEEE 802.1D, 802.1Q, 802.1w, 802.1s, 802.3ad
Operating Temperature	0°C to 45°C
Operating Humidity	10% to 90% (non-condensing)
VLANs	4K