topic Delaying NEAP (MAC auth) on VOSS until EAP is attempted in ExtremeSwitching (VSP/Fabric Engine)

Delaying NEAP (MAC auth) on VOSS until EAP is attempted

James_A — Mon, 20 Jan 2025 05:21:48 GMT

Is it possible to delay NEAP authentication until an EAP request is sent? When our laptops go to sleep, on wakeup sometimes NEAP is tried and succeeds before any EAP request happens (and I ran wireshark to confirm no EAP packets are seen by the client), so the laptop doesn't get put back into the right I-SID. I found

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000105722

which (while about something else) says that VOSS doesn't have the ability to delay NEAP authentication, is that still the case?

Side note - the KB results returned in the search bar on this community link to empty pages:

https://community.extremenetworks.com/t5/custom/page/page-id/CrmArticlePage?ka-guid=ka8Um000000ICsLIAW

Re: Delaying NEAP (MAC auth) on VOSS until EAP is attempted

Yoann_Jonard — Mon, 20 Jan 2025 09:40:27 GMT

Hello James,

From what I know this is still the case and you cannot delay NEAP authentication.

You can be more specific in your Control rules to expect EAP authentication method only for your computer, so if a computer tries to authenticate with NEAP it gets rejected. That's what we are doing and it works pretty well.

Re: Delaying NEAP (MAC auth) on VOSS until EAP is attempted

EF — Tue, 21 Jan 2025 20:12:08 GMT

Hello James,

In my case I dont like see a lot of useless entries NEAP in the RADIUS from devices EAP capable , so configure NEAP only on ports on it is needed.

As a trick you can enable STP (disable edge) on ports, maybe it can give enought time to supplicant to respond EAP before NEAP happens.

Regards