Setting MultiAuth Authentication Port Properties

MultiAuth authentication supports the configuration of MultiAuth port and maximum number of users per port properties. The MultiAuth port property can be configured as follows:

• Authentication Optional – Authentication methods are active on the port based upon the global and port authentication method. Before authentication succeeds, the current policy role applied to the port is assigned to the ingress traffic. This is the default role if no authenticated user or device exists on the port. After authentication succeeds, the user or device is allowed to access the network according to the policy information returned from the authentication server, in the form of the RADIUS Filter-ID attribute, or the static configuration on the switch. This is the default setting.
• Authentication Required – Authentication methods are active on the port, based on the global and per port authentication method configured. Before authentication succeeds, no traffic is forwarded onto the network. After authentication succeeds, the user or device gains access to the network based upon the policy information returned by the authentication server in the form of the RADIUS Filter-ID attribute, or the static configuration on the switch.
• Force Authenticated – The port is completely accessible by all users and devices connected to the port, all authentication methods are inactive on the port, and all frames are forwarded onto the network.
• Force Unauthenticated – The port is completely closed for access by all users and devices connected to the port. All authentication methods are inactive and all frames are discarded.

MultiAuth Authentication Port and Maximum User Properties Configuration describes setting the MultiAuth authentication port and maximum user properties.

MultiAuth Authentication Port and Maximum User Properties Configuration

Step	Task	Command(s)
1	Set the specified ports to the MultiAuth authentication optional port mode.	set multiauth port mode auth-opt port-string
2	Set the specified ports to the MultiAuth authentication required port mode.	set multiauth port mode auth-reqd port-string
3	Set the specified ports to the MultiAuth authentication force authenticated port mode.	set multiauth port mode force-auth port-string
4	Set the specified ports to the MultiAuth authentication force unauthenticated port mode.	set multiauth port mode force-unauth port-string
5	Optionally set the maximum number of authenticated users for the specified port. Note: This value can be set to any value up to the maximum number of MultiAuth users supported for the device. See the firmware release notes that come with your device for the maximum number of supported MultiAuth users the device supports.	set multiauth port mode numusers numusers port-string
6	Reset the ports MultiAuth authentication port mode to the default value for the specified ports.	clear multiauth port mode port-string
7	Reset the ports MultiAuth authentication port maximum number of users to the default value for the specified ports.	clear multiauth port numusers port-string