<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Quick update here – it appears as if setting the default-vlan-id to be 3 puts all the mac-auth’ed ports onto vlan 3 until they see a mac address. As a result we can make WOL work how we want.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Richard<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB"> foundry-nsp
[mailto:foundry-nsp-bounces@puck.nether.net] <b>On Behalf Of </b>Du Feu, Richard<br>
<b>Sent:</b> 06 June 2014 13:09<br>
<b>To:</b> foundry-nsp@puck.nether.net<br>
<b>Subject:</b> [f-nsp] Brocade ICX6450, mac-auth and wake on lan<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We’re currently evaluating a Brocade ICX6450 for various things and have hit a bit of a stumbling block. We are doing mac-authentication via radius so have the unit configured as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">vlan 2 name office by port<o:p></o:p></p>
<p class="MsoNormal">tagged ethe 1/1/24 <o:p></o:p></p>
<p class="MsoNormal"> mac-vlan-permit ethe 1/1/2 to 1/1/23 <o:p></o:p></p>
<p class="MsoNormal">!<o:p></o:p></p>
<p class="MsoNormal">vlan 3 name unval by port<o:p></o:p></p>
<p class="MsoNormal">tagged ethe 1/1/24 <o:p></o:p></p>
<p class="MsoNormal"> mac-vlan-permit ethe 1/1/2 to 1/1/23 <o:p></o:p></p>
<p class="MsoNormal">!
<o:p></o:p></p>
<p class="MsoNormal">vlan 4 name voip by port<o:p></o:p></p>
<p class="MsoNormal">tagged ethe 1/1/24 <o:p></o:p></p>
<p class="MsoNormal"> mac-vlan-permit ethe 1/1/2 to 1/1/23 <o:p></o:p></p>
<p class="MsoNormal">!<o:p></o:p></p>
<p class="MsoNormal">vlan 5 name fallback by port<o:p></o:p></p>
<p class="MsoNormal">tagged ethe 1/1/24 <o:p></o:p></p>
<p class="MsoNormal"> mac-vlan-permit ethe 1/1/2 to 1/1/23<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">mac-authentication enable
<o:p></o:p></p>
<p class="MsoNormal">mac-authentication mac-vlan-dyn-activation
<o:p></o:p></p>
<p class="MsoNormal">mac-authentication auth-fail-vlan-id 5 <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">interface ethernet 1/1/2<o:p></o:p></p>
<p class="MsoNormal">mac-authentication mac-vlan max-mac-entries 16<o:p></o:p></p>
<p class="MsoNormal">mac-authentication mac-vlan enable<o:p></o:p></p>
<p class="MsoNormal">mac-authentication auth-fail-action restrict-vlan<o:p></o:p></p>
<p class="MsoNormal">inline power<o:p></o:p></p>
<p class="MsoNormal">voice-vlan 4<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Everything works fine and as we would expect. The problem we have and can’t find a solution to is how to make a client without a mac entry (and therefore no port authentication) appear on a default vlan. We need them on a vlan so we
can send a wake on lan request to sleeping clients. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">With HPs and Junipers we just add the vlan we want them to be on by default as untagged to all edge ports which just works. As soon as they send a packet the client authenticates and when we send a WOL request to the default vlan they
wake up. With the brocades when I try to add a vlan to a port I get the following error message:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">SSH@brocade-test(config-vlan-3)#untagged ethernet 1/1/2<o:p></o:p></p>
<p class="MsoNormal">Error - command not allowed for 'mac-vlan-permit' port: 1/1/2<o:p></o:p></p>
<p class="MsoNormal">SSH@brocade-test(config-vlan-3)#<span style="mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">I’ve had a good read through the documentation and it hasn’t helped so I’m wondering if anyone on this list has found a solution to this problem.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Richard du Feu<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Network Support<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Information Systems Services<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-GB">Lancaster University<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>