Enterasys Networks 6H2xx - Manual (Page 67)

Overview of Security Methods
Accessing Local Management 3-25
3.6.4 MAC Authentication Control
This global variable can be set to enabled or disabled.
If set to enabled, then
a. MAC Authentication is active on those ports whose individual port-enabled variable is set to
enabled.
b. All session and statistic information is reset to defaults.
c. Any MAC addresses currently locked to ports are unlocked.
If set to disabled, then
a. MAC Authentication stops for all ports.
b. All active sessions are terminated with the cause portAdminDisabled.
c. All policies are applied to ports as a result of a MAC Authentication reverting to the ports
default policy, if any.
d. All ports currently authenticated using 802.1X, are unaffected.
e. Any 802.1X ports, which were set to forced-unauth, revert back to discarding all frames
regardless of the MAC Authentication state.
Force
Unauthori-
zation Enabled No No Don’t
Care • MAC performs authentication.
• Frames are discarded.
Force
Unauthori-
zation Disabled Don’t
Care Don’t
Care Don’t
Care • Neither method performs
authentication.
• Frames are discarded.
Table 3-5 MAC / 802.1X Precedence States (Continued)
802.1X
Port
Control MAC
Port
Control
Authen-
ticated?
Default
Policy
Exists?
Autho-
rized
Policy
Exists?
Action