Dell C9000 series, Reference Manual

Page: 259 / 2286

authentication server for the supplicant MAC addresses configured in the associated
profile.
Before you enable static MAB, you must do the following:
• Enable MAC authentication bypass on the port by configuring the
dot1x mac-
auth-bypass
command.
• Ensure that no configured profile exists at the time of configuring the
static-
mab
command.
• Use this command in Interface Batch Mode to enable static MAB in a dual-homing
setup.
Example
Dell(conf)#do show dot1x interface ten gigabit ethernet 0/41
802.1x information on Te 0/41:
----------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZED (STATIC-MAB)
Re-Authentication: Enable
Untagged VLAN id: 400
Guest VLAN: Enable
Guest VLAN id: 400
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 400
Auth-Fail Max-Attempts: 3
Critical VLAN: Enable
Critical VLAN id: 400
Mac-Auth-Bypass: Disable
Mac-Auth-Bypass Only: Disable
Static-MAB: Enable
Static-MAB Profile: Sample
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 60 seconds
Max-EAP-Req: 2
Host Mode: SINGLE_HOST
Auth PAE State: Authenticated
Backend State: Idle
dot1x supplicant-timeout
Configure the amount of time after which exchanges with the supplicant time-out.
C9000 Series
Syntax
dot1x supplicant-timeout seconds
To return to the default, use the
no dot1x supplicant-timeout
command.
802.1X 259