Layer 2 control protocol interaction with authentication methods
The following table describes the interactions of Layer 2 control protocols with 802.1x authentication, MAC authentication, and VLAN authentication.
Layer 2 control protocol  | 
802.1x port authentication enabled  | 
MAC authentication enabled  | 
VLAN authentication enabled  | 
|
|---|---|---|---|---|
Dot1q explicit null SAP not configured  | 
Dot1q explicit null SAP configured  | 
|||
EFM OAM  | 
Allow  | 
Allow  | 
Allow  | 
Allow  | 
LLDP  | 
Block if port is unauthenticated Allow if port is authenticated  | 
Block if MAC is unauthenticated Allow if MAC is authenticated  | 
Allow  | 
Allow  | 
LACP  | 
Block if port is unauthenticated Allow if port is authenticated  | 
Block if MAC is unauthenticated Allow if MAC is authenticated  | 
LAG and LACP are not supported on ports with VLAN authentication enabled  | 
LAG and LACP are not supported on ports with VLAN authentication enabled  | 
CFM  | 
Block if port is unauthenticated Allow if port is authenticated  | 
Block if MAC is unauthenticated Allow if MAC is authenticated  | 
Block if VLAN (SAP) is unauthenticated Allow only if specific VLAN is authenticated  | 
Block if null SAP is unauthenticated Allow if null SAP is authenticated  | 
xSTP (STP/RSTP/MSTP)  | 
Block if port is unauthenticated Allow if port is authenticated  | 
Block if MAC is unauthenticated Allow if MAC is authenticated  | 
Block if VLAN (SAP) is unauthenticated Allow if VLAN (SAP) is authenticated  | 
Block if null SAP is unauthenticated Allow if null SAP is authenticated  |