Purpose
Command or Action
Sets the number of seconds that the Cisco NX-OS device
waits before retransmitting a packet to the authentication
(Optional)
dot1x timeout server-timeout seconds
Example:
Step 5
server. The default is 30 seconds. The range is from 1 to
65535 seconds.
switch(config-if)# dot1x timeout server-timeout
60
Sets the number of seconds that the Cisco NX-OS device
waits for the supplicant to respond to an EAP request frame
(Optional)
dot1x timeout supp-timeout seconds
Example:
Step 6
before the Cisco NX-OS device retransmits the frame. The
switch(config-if)# dot1x timeout supp-timeout 20
default is 30 seconds. The range is from 1 to 65535
seconds.
Sets the number of seconds between the retransmission of
EAP request frames when the supplicant does not send
(Optional)
dot1x timeout tx-period seconds
Example:
Step 7
notification that it received the request. The default is the
switch(config-if)# dot1x timeout tx-period 40
global number of seconds set for all interfaces. The range
is from 1 to 65535 seconds.
Sets the number of seconds the switch can remain inactive.
The recommended minimum value is1800 seconds.
(Optional)
dot1x timeout inactivity-period seconds
Example:
Step 8
switch(config-if)# dot1x timeout inactivity-period
1800
Exits configuration mode.
exit
Example:
Step 9
switch(config)# exit
switch#
Displays the 802.1X configuration.
(Optional)
show dot1x all
Example:
Step 10
switch# show dot1x all
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 11
switch# copy running-config startup-config
Enabling MAC Authentication Bypass
You can enable MAC authentication bypass on an interface that has no supplicant connected.
Before you begin
Enable the 802.1X feature on the Cisco NX-OS device.
SUMMARY STEPS
1.
configure terminal
2.
interface ethernet slot/port
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
195
Configuring 802.1X
Enabling MAC Authentication Bypass
