Network Login over MLAG

Starting with ExtremeXOS 22.4, NetLogin MAC-based authentication and 802.1X authentication are supported in policy mode (NetLogin web-based authentication is not supported) over MLAG (Multi-switch Link Aggregation Group) ports. If an MLAG peer goes down, supplicants remain authenticated on the other MLAG peers and continue to send data traffic thereby providing redundancy.

After successful authentication, NetLogin passes the necessary information to the policy module (such as the port, MAC address, policy profile, and authentication result) for further processing, such as movement of the port to VLAN and insertion of MAC address in the FDB.
Note

Note

ISC port must be added to the destination VLAN for all dynamic VLANs on the switch.

Limitations

  • Web-based authentication is not supported.
  • Supported in policy mode only.