Authentication Open for MAB

rezaalikhani — Wed, 10 May 2023 16:31:26 GMT

Hi all;

Does "authentication open" work for MAB, too?

Thanks

Re: Authentication Open for MAB

Rob Ingram — Wed, 10 May 2023 16:35:07 GMT

@rezaalikhani yes, MAB and 802.1X

Re: Authentication Open for MAB

Flavio Miranda — Wed, 10 May 2023 16:43:15 GMT

Hello

It does in conjunction with MAB and dot1x.

By definition:

"Open authentication is enabled by entering the authentication open command after host mode configuration,
and acts as an extension to the configured host mode. For example, if open authentication is enabled with
single-host mode, then the port will allow only one MAC address. When preauthentication open access is
enabled, initial traffic on the port is restricted only by whatever other access restriction, independent of 802.1X,
is configured on the port. If no access restriction other than 802.1X is configured on the port, then a client
device will have full access on the configured VLAN."

So, the implementation would be:

authentication host-mode multi-auth

authentication open

authentication order mab dot1x

authentication priority dot1x mab

authentication port-control auto

topic Re: Authentication Open for MAB in Network Access Control

Authentication Open for MAB

Re: Authentication Open for MAB

Re: Authentication Open for MAB