Enable 802.1x and MAC Authentication on the Same Port

In firmware version 1.01.04 and later, you can configure ISW switch ports to dynamically perform either 802.1x or MAC authentication.

When a connection is established and the configured port receives an authentication request, it performs the following steps, as illustrated in Flow for dynamic 802.1x and MAC authentication:
  1. If EAP/EAPOL is enabled on the client, attempt to authenticate using 802.1x.
  2. Otherwise, attempt to authenticate using MAC.
  3. If neither attempt is successful, provide guest VLAN access.
  4. If guest VLAN is not enabled, deny the authentication request.
Click to expand in new window
Flow for dynamic 802.1x and MAC authentication
Flowchart showing the sequence of authentication attempts: Attempt using 802.1x, attempt using MAC, provide guest VLAN access if enabled
Note

Note

If you are enabling 802.1x on the end-station, a port bounce on the ISW switch will be required to perform 802.1x authentication.

See the following topics for configuration details,

9034965-02 Rev AB