802.1x Multi Auth

[hs08]

When we use host-mode multi-auth then we can use this method if the port switch connected to unmanage switch, so all endpoints under unmanage switch can be controlled?

[aleabrahao]

@hs08 

Yes, with host-mode multi-auth, the switch can authenticate and control the individual endpoints connected behind an unmanaged switch, subject to the limitations of only seeing their MAC addresses through the single physical port.

If you stop to analyze it, it's the same case when you have an access point connected to the port, you use multi-auth.

[hs08]

i mean if i have unmanage 8 ports then there are 4 authorized endpoints already connected and if someone plug rogue endpoint then the rogue host can be blocked while keeping 4 authorized endpoint still connected. Am i right?

[aleabrahao]

In theory, yes, in practice, I admit I’ve never tested it, as I don’t use unmanaged switches.