Skip to content

Commit

Permalink
Update PnacSonicHLD.md
Browse files Browse the repository at this point in the history
  • Loading branch information
kishorgovind authored and zhangyanzhao committed May 16, 2023
1 parent d7aae4a commit a9541d5
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion doc/NAC/PnacSonicHLD.md
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,7 @@ Above diagram authenticator block/unblocks all traffic in ingress direction base
# 3 Design
## 3.1 Options to Block or allows port traffic based on Authentication status of the port
As part of the design there are various design options were considered to effectively allow/disallow user traffic based on authentication status of the port connected to the end user device. Following paragraph list all these option with pros and cons and provide which option is best suited for the design.
### 3.1.1 Allowing or Blocking user traffic by using RSTP/STP states
### 3.1.1 Options-1 Allowing or Blocking user traffic by using RSTP STP states
In this design option, if the NAC-enabled bridge-port is not authenticated then Port state is configured in “Blocked State” by invoking SAI API. After bridge-port get authenticated then the port state is changed to “Forwarding State”.

***Pros:***
Expand Down

0 comments on commit a9541d5

Please sign in to comment.