Alcatel-Lucent 6850-48 Guida Di Rete

Configuring Access Guardian

Configuring Access Guardian Policies

OmniSwitch AOS Release 6 Network Configuration Guide

page 34-27

To configure a non-supplicant policy that will not perform MAC authentication, use the 

 command. The following parameter keywords are available with this command to spec-

ify one or more policies for classifying devices

:

Note that this type of policy does not use 802.1x or MAC authentication. As a result, all of the available 
policy keywords restrict the assignment of the non-supplicant device to only those VLANs that are not 
authenticated VLANs. The pass and fail keywords are not used when configuring this type of policy.

The following table provides example non-supplicant policy commands and a description of how the 
resulting policy is applied to classify supplicant devices:

If the MAC authentication process is successful 
but does not return a VLAN ID for the device, then 
the following occurs:
1 Group Mobility VLAN or UNP mobile rules 

are applied.

2 If Group Mobility classification fails, then the 

device is assigned to the default VLAN for 
port 1/24.

If the device fails MAC authentication, then the 
following occurs:
1 If VLAN 10 exists and is not an authenticated 

VLAN, the device is assigned to VLAN 10.

2 If VLAN 10 does not exist or is an authenti-

cated VLAN, the device is blocked from 
accessing the switch on port 1/24.

If the MAC authentication process is successful 
but does not return a VLAN ID for the device, then 
the following occurs:
1 The device is assigned to VLAN 10.
2 If VLAN 10 does not exist, then the device is 

assigned to the default VLAN for port 1/48.

If the device fails MAC authentication, the device 
is blocked from accessing the switch on port 1/48.