HP FlexFabric 5700 series User Manual

109
Configuring a MAC authentication guest VLAN
You must configure the MAC authentication guest VLAN on a hybrid port. Before you configure the MAC
authentication guest VLAN on a hybrid port, complete the following tasks:
• Enable MAC authentication globally and on the port.
• Enable MAC-based VLAN on the port.
• Create the VLAN to be specified as the MAC authentication guest VLAN.
• Configure the VLAN as an untagged member on the port.
When you configure the MAC authentication guest VLAN on a port, follow the guidelines in Table 12.
Table 12 Relationships
of the MAC authentication guest VLAN with other security features
Feature Relationshi
p
descri
p
tion Reference
Quiet feature of MAC
authentication
The MAC authentication guest VLAN feature
has higher priority.
When a user fails MAC authentication, the
user can access the resources in the guest
VLAN. The user's MAC address is not marked
as a silent MAC address.
See "Setting MAC
authentication timers."
Port intrusion protection
The guest VLAN feature has higher priority
than the block MAC action but lower priority
than the shutdown port action of the port
intrusion protection feature.
See "Configuring port
security."
To configure the MAC authentication guest VLAN on a port:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
N/A
3. Specify the MAC
authentication guest
VLAN on the port.
mac-authentication guest-vlan
guest-vlan-id
By default, no MAC authentication guest
VLAN is configured.
You can configure only one MAC
authentication guest VLAN on a port.
Configuring a MAC authentication critical VLAN
You must configure the MAC authentication critical VLAN on a hybrid port. Before you configure the
MAC authentication critical VLAN on a hybrid port, complete the following tasks:
• Enable MAC authentication globally and on the port.
• Enable MAC-based VLAN on the port.
• Create the VLAN to be specified as the MAC authentication critical VLAN.
• Configure the VLAN as an untagged member on the port.
When you configure the MAC authentication critical VLAN on a port, follow the guidelines in Table 13.

HP FlexFabric 5700 series Specifications

General

Brand	HP
Model	FlexFabric 5700 series
Category	Switch
Language	English