Dell C9000 series, Reference Manual

Page: 243 / 2286

Version Description
9.2(1.0) Introduced on the Z9500.
8.3.19.0 Introduced on the S4820T.
8.3.12.0 Introduced on the S4810.
8.3.11.1 Introduced on the Z9000.
8.4.2.1 Introduced on the C-Series and S-Series.
Usage Information The prerequisites for enabling MAB-only authentication on a port are:
• Enable 802.1X authentication globally on the switch and on the port (the
dot1x
authentication
command).
• Enable MAC authentication bypass on the port (the
dot1x mac-auth-bypass
command).
In MAB-only authentication mode, a port authenticates using the host MAC address
even though 802.1x authentication is enabled. If the MAB-only authentication fails, the
host is placed in the guest VLAN (if configured).
To disable MAB-only authentication on a port, enter the
no dot1x auth-type mab-
only
command.
Use this command in Interface Batch Mode to authenticate a device with MAB in a
dual-homing setup.
Related
Commands dot1x mac-auth-bypass
dot1x authentication (Configuration)
Enable dot1x globally. Enable dot1x both globally and at the interface level.
C9000 Series
Syntax
dot1x authentication
To disable dot1x globally, use the
no dot1x authentication
command.
Defaults Disabled
Command Modes
CONFIGURATION
CONFIGURATION TERMINAL BATCH
802.1X 243