Dynamic MAB session handling
You can now configure in the CLI how long MAC authentication bypass (MAB) sessions are kept:
-
In static mode, MAB sessions are kept until the link goes down or the MAB sessions are manually deleted with the CLI. Static mode is the default.
-
In dynamic mode, MAB sessions are treated the same way as dynamically learned MAC addresses.
In dynamic mode, you specify how long MAB sessions are kept with the
set mac-aging-interval <10-1,000,000 seconds>command (underconfig switch-controller global). By default, themac-aging-intervalis set to 300 seconds.
Whenever you change the mac-aging-interval or mab-entry-as setting, all MAB sessions are deleted, but the EAP sessions are unchanged.
This feature is supported on all FortiSwitch models.
To configure how long MAB sessions are kept:
config switch-controller 802-1X-settings
set mab-entry-as {dynamic | static}
end