5130EI - iAP mac authentication

[Mauzr]

Dear community,

I would ask for help with switch 5130EI. I need to do MAC Authentication for Aruba iAPs with this port config:

interface GigabitEthernet1/0/21
description AP
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 2 20 70 100 tagged
port hybrid pvid vlan 100
mac-vlan enable
stp edged-port
mac-authentication domain zk
mac-authentication re-authenticate server-unreachable keep-online
mac-authentication critical vlan 70
mac-authentication host-mode multi-vlan
port-security port-mode mac-authentication

and the problem is that how to switch port to port-based mode to prevent wireless clients from mac-authentication on port. Every client which connected to the SSID do mac authentication on switch and I really dont know how to disable it. 

Can someone help me please ?

Thanks and best regards

Vaclav

[Mauzr]

And one more informcation, switch firmware is 3208P16.

V.

[Som77]

Hi Vaclav,

From what i understand from above config irrespective if its wireless client's or ethernet clients it would go for MAC-Authentication that is the feature on MAC-Authentication Enabled as per the config

It's port security.  It will do it to whatever is connected to that port.  If its not required on the wireless clients only way is we need to put the APs on their own ports and shut off the port-security.

I'm afraid there is no other command as per security document mentioned below.

http://h22208.www2.hpe.com/eginfolib/networking/docs/switches/5130ei/5200-3946_security_cg/content/index.htm