Supplicant Blacklisting

[andrewsigna]

Hi!

Does anyone have documentation regarding blacklisting after a supplicant fails the authentication and posturing put in place?

Will it be port-based, or will a supplicant be able to plug into another switch port and begin the EAP authentication process all over again?

Thanks in advance!

[Marvin Rhoads]

Blacklisting is different from AuthC failure.

The default check for blacklist happens before the main (or customized) AuthC/AuthZ actions.

A client that was denied access but not blacklisted can (generally) keep trying over and again.