topic Re: ERROR: Dot1x/MAC-Auth exist on selective ports of this VE port in ICX Switches

ERROR: Dot1x/MAC-Auth exist on selective ports of this VE port

jason_guntharp — Tue, 30 Jan 2018 22:36:53 GMT

ICX6610-48PE
08030mb layer3 code
acl-per-port-per-vlan is enabled

using MAC AUTH and Radius for VLAN steering

trying to apply an (ip access-group x in) to VE fails with: ERROR: Dot1x/MAC-Auth exist on selective ports of this VE port.

What is the recommended way to apply an ACL (in) to a VE with MAC AUTH enabled?

matthew_onciul — Tue, 21 Aug 2018 15:55:30 GMT

Hey Jason, did you ever figure this one out?

edrei_rodriguez — Wed, 22 Aug 2018 17:10:35 GMT

Hello Jason,

You can use 802.1X authentication or MAC authentication with dynamic ACL assignment, please find below the reference guide.

http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-securityguide/GUID-B2DA86A5-E5AD-47B1...

Another option is to use CoA in order to send the required rules as an attribute.

Regards