Enabling The Mac Authentication Critical Voice Vlan; Configuration Prerequisites; Configuration Procedure; Configuring The Keep-Online Feature - HP FlexNetwork 10500 Series Security Configuration Manual

Step
3. Specify the MAC
authentication critical
VLAN on the port.
Enabling the MAC authentication critical voice
VLAN
The MAC authentication critical voice VLAN on a port accommodates MAC authentication voice
users who have failed authentication because none of the RADIUS servers in their ISP domain are
reachable.

Configuration prerequisites

Before you enable the MAC authentication critical voice VLAN on a port, complete the following
tasks:
•
Enable LLDP both globally and on the port.
The device uses LLDP to identify voice users. For information about LLDP, see Layer 2—LAN
Switching Configuration Guide.
•
Enable voice VLAN on the port.

Configuration procedure

To enable the MAC authentication critical voice VLAN feature on a port:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Enable the MAC
authentication critical
voice VLAN feature on a
port.

Configuring the keep-online feature

By default, the device logs off online MAC authentication users if no server is reachable for MAC
reauthentication. The keep-online feature keeps authenticated MAC authentication users online
when no server is reachable for MAC reauthentication.
In a fast-recovery network, you can use the keep-online feature to prevent MAC authentication users
from coming online and going offline frequently.
To configure the keep-online feature:
Command
mac-authentication critical vlan
critical-vlan-id
Command
system-view
interface interface-type
interface-number
mac-authentication critical-voice
vlan
124
Remarks
By default, no MAC authentication
critical VLAN is configured.
You can configure only one MAC
authentication critical VLAN on a
port.
Remarks
N/A
N/A
By default, the MAC
authentication critical voice VLAN
feature is disabled on the port.