topic Re: MAC based Authentication in Switches, Hubs, and Modems

MAC based Authentication

Martin Hanspeter — Tue, 29 Mar 2011 12:34:29 GMT

Hello,

I´ve activated on an HP Procurve 2610-48 PWR the mac-based Authentication with HP IDM and it works fine. Only one device makes troubles.

If i attach the device, is a SPS-Control Panel (Siemens Simatic), the port authenticates successfully but i can not ping the device.
If i attach it, on port without mac-authentication, than i can ping it. A show mac-address gives me two different mac´s on the port, where the devices is attached.

I´ve tried to create users for the two mac-addresses, without success.

Thanks for your help.

Re: MAC based Authentication

Jeff Carrell — Wed, 30 Mar 2011 01:08:36 GMT

hmm...why 2 MAC addr from that device??

You might try to up the "client-limit" on that port...the default setting is '1'.

hth...Jeff

Re: MAC based Authentication

Pieter 't Hart — Wed, 30 Mar 2011 06:14:26 GMT

some devices have a "shared management network port" that is : one physical port with two network controllers attached internally.
- one for data
- one for management (frequently web based managment).
Look if your dhcp-server shows a lease for this Mac address.
and open http:// to verify if this is a management interface.

Many servers offer such a shared port.
some of your options are:
- disable the management interface
- configure the management interface to use vlan-tags
- configure the device to use two different physical connections (if present).