14.3.10 Configuring Multiple Authentication
About Multiple Authentication
When enabled, multiple authentication allows multiple users to authenticate using up to three
methods on the same port, and receive a policy traffic profile based on the RADIUS configuration.
When multi-authentication ports have a combination of authentication methods enabled, and a user
is successfully authenticated in more than one way at the same time, the precedence of the
authentication methods will determine which RADIUS-returned filter ID will be processed and
result in an applied traffic policy profile.
DFE-Platinum Multi-User Capacities
Access modules, defined as fixed high density copper ports – 10/100 or 10/100/1000 – support up
to 8 authenticated users per port. Access modules include the following: 2G4082-25, 7G4282-41,
7G4282-49, 7G4202-60, 7G4202-72, 7G4285-49, 7G4205-72, 7H4202-72, 7H4203-72,
7H4382-25, 7H4382-49, 7H4383-49, and 7H4385-49.
Uplink modules, defined as modular SFP, 10 Gbps, and 100 FX ports, support up to 128
authenticated users per port. Uplink modules include the following: 7G4202-30, 7G4270-12,
7G4280-19, 7H4284-49, and 7K4290-02. 802.3 LAG ports support 128 users.
The network expansion modules 7G-6MGBIC-A, 7G-6MGBIC-B, and 7K-2XFP-6MGBIC
support 128 users per port when installed in Platinum modules.
The standalone device 2G4072-52, supports up to 8 authenticated users per port on the fixed
10/100/1000 ports and 128 authenticated users on the MGBIC ports.
The number of authenticated users allowed per port can be controlled by means of the set multiauth
port numusers command
DFE-Diamond Multi-User Capacities
All Diamond modules support up to 256 authenticated users per port by default. Diamond modules
include the following: 7GR4202-30, 7GR4270-12, 7GR4280-19, and 7KR4290-02. 802.3 LAG
ports support 256 users by default.
The network expansion modules 7G-6MGBIC-B and 7K-2XFP-6MGBIC support 256 users per
port by default when installed in Diamond modules.
The number of users per port can be adjusted up to a maximum of 1024, using the set multiauth
port numusers command
(page
14-140).
(page
14-140).
Security Configuration Command Set
Configuring Multiple Authentication
Matrix NSA Series Configuration Guide
14-133