ERROR: Dot1x/MAC-Auth exist on selective ports of this VE port

  • 1
  • Question
  • Updated 2 months ago
  • Answered
ICX6610-48PE
08030mb layer3 code
acl-per-port-per-vlan is enabled

using MAC AUTH and Radius for VLAN steering

trying to apply an (ip access-group x in) to VE fails with: ERROR: Dot1x/MAC-Auth exist on selective ports of this VE port.

 What is the recommended way to apply an ACL (in) to a VE with MAC AUTH enabled?

Photo of JASON GUNTHARP

JASON GUNTHARP

  • 1 Post
  • 0 Reply Likes

Posted 9 months ago

  • 1
Photo of monciul

monciul

  • 1 Post
  • 0 Reply Likes
Hey Jason, did you ever figure this one out?
Photo of Edrei Rodriguez

Edrei Rodriguez, Employee

  • 4 Posts
  • 4 Reply Likes
Hello Jason,

You can use 802.1X authentication or MAC authentication with dynamic ACL assignment, please find below the reference guide.

http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-securityguide/GUID-B2DA86A5-E5AD-47B1...

Another option is to use CoA in order to send the required rules as an attribute.

Regards