HPE7-A06 · Question #21
A customer has configured 802.1X authentication with MAC authentication fallback and is complaining that printers are not accessible with the new configuration below. You can see a successful entry…
The correct answer is B. interface 1/1/1. Printers don't do 802.1X. With the default order, the switch waits for 802.1X to fail before trying MAC authentication, causing DHCP to time out and the printer to self-assign a 169.254 address. Set the authentication order so MAC auth is tried first: aaa authentication…
Question
A customer has configured 802.1X authentication with MAC authentication fallback and is complaining that printers are not accessible with the new configuration below. You can see a successful entry in HPE Aruba Networking ClearPass Access Tracker assigning the correct user role and you have confirmed that the printer MAC address is being learned in the correct VLAN. However, the printer network settings show an IP address starting with 169.254. Which configuration change would you recommend to resolve the issue?
Exhibit
Options
- Ainterface 1/1/1
- Binterface 1/1/1
- Caaa authentication allow-fail-through
- Dinterface 1/1/1
How the community answered
(34 responses)- A6% (2)
- B59% (20)
- C9% (3)
- D26% (9)
Explanation
Printers don't do 802.1X. With the default order, the switch waits for 802.1X to fail before trying MAC authentication, causing DHCP to time out and the printer to self-assign a 169.254 address. Set the authentication order so MAC auth is tried first: aaa authentication port-access auth-precedence mac-auth dot1x This lets the printer authenticate immediately via MAC and obtain a DHCP address in the correct
Topics
Community Discussion
No community discussion yet for this question.