Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 1121

access point also authenticate using the switch resources. The access point must be configured to transparently pass EAPOL traffic. Use switchport mode general to support RADIUS VLAN assignment for hosts. • multi-domain-In this mode, exactly one data client and one voice client may be authenticated. The switch enforces this restriction by examining the source MAC address of incoming packets. The typical use case is an IP phone connected to a NAS port and a laptop connected to the hub port of the IP phone. Both the devices must authenticate to access the network. The voice and data domains are typically separated by VLANs. The RADIUS server attribute "Cisco-AVPair = "device-traffic-class=voice" is used to identify a voice client. Use switchport mode general to support RADIUS VLAN assignment for hosts. • multi-host-Allow multiple hosts access to the network on an authenticated interface. A host must authenticate on the interface before network access is granted. However once authentication succeeds, access is granted to all hosts connected to the port. The typical use case for multi-host mode is a wireless access point (AP) connected to an access controlled port of a NAS. Once the access point is authenticated by the NAS, the port is authorized for traffic from the access point and all the wireless clients connected to the access point. Essentially, the AP is a trusted device. If it is desired that the AP connected hosts be authenticated in this mode, the AP must implement a NAS capability and authenticate the clients to a RADIUS server. • multi-domain-multi-host-In this mode, one voice client and one data client may authenticate on a port and be granted network access. However, once a data client is authenticated, access over the data VLAN is unrestricted and any device may utilize the data VLAN. Authentication to the voice VLAN is supported and is restricted to the authenticating voice device. The typical use case is an IP phone connected to a NAS port and a Virtual Machine Controller connected to the hub port of the IP phone. The Virtual Machine Controller hosts multiple Virtual Machines. Both the VM Controller and the IP phone need to be authenticated to access the Security Commands 1121