Related
Commands
•
dot1x port-control
— Enables port control on an interface.
•
dot1x guest-vlan
— Configures a guest VLAN for limited access users or for
devices that are not 802.1X capable.
•
show dot1x interface
— Displays the 802.1X configuration of an interface.
dot1x auth-server
Configure the authentication server to RADIUS.
Syntax
dot1x auth-server radius
Defaults
none
Command
Modes
CONFIGURATION
Command
History
Version 9.2(0.0)
Introduced on the MXL 10/40GbE Switch IO Module.
dot1x auth-type mab-only
To authenticate a device with MAC authentication bypass (MAB), only use the host MAC address.
Syntax
dot1x auth-type mab-only
Defaults
Disabled
Command
Modes
INTERFACE
Command
History
Version 9.2(0.0)
Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
The prerequisites for enabling MAB-only authentication on a port are:
• Enable 802.1X authentication globally on the switch and on the port (the
dot1x
authentication
command).
• Enable MAC authentication bypass on the port (the
dot1x mac-auth-bypass
command).
In MAB-only authentication mode, a port authenticates using the host MAC
address even though 802.1xauthentication is enabled. If the MAB-only
authentication fails, the host is placed in the guest VLAN (if configured).
To disable MAB-only authentication on a port, enter the
no dot1x auth-type
mab-only
command.
802.1X
127