Create Date: May 31 2013 2:05PM
The EXOS 15.3 concepts guide says:
"An important enhancement over the IEEE 802.1x standard is that ExtremeXOS supports multiple clients(supplicants) to be individually authenticated on the same port.
As I understand it, 802.1x says that what's controlled is the physical layer. The port is either authenticated, or not. If there's another switch attached to that port, and there are a dozen clients connected through that switch, that doesn't matter. Once the port is authenticated, it's authenticated for anything with physical access to that port. What happens at layer 2 is irrelevant.
But, EXOS has "enhanced" this to track authentication on a per-MAC basis. It maintains a list of all the MACs seen on the port (from the FDB, I imagine), and for each one, tracks if it's authenticated or not. Frames from an unauthenticated MAC are dropped.
What if I want to disable this "enhancement"? Is there a way to behave according to the 802.1x standard, and enable the *whole* port once it's authenticated? (from Phil_Frost)