318
802.1x Commands
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\802.1X.fm
D E L L C O N F ID E N T IA L – P R E L IM I N A RY 5 / 1 5 /1 2 - F O R P R O O F O N LY
Example
The following example enables unauthorized users on gigabitethernet port
1/0/1 to access the guest VLAN.
Console(config)#
interface
gigabitethernet 1/0/
15
Console(config-if)#
dot1x guest-vlan enable
dot1x mac-authentication
Use the
dot1x mac-authentication
Interface Configuration (Ethernet) mode
command to enable authentication based on the station’s MAC address. Use
the
no
form of this command to disable access.
Syntax
dot1x mac-authentication
{mac-only | mac-and-802.1x}
no dot1x mac-authentication
Parameters
•
mac-only
—Enables authentication based on the station's MAC address
only. 802.1X frames are ignored.
•
mac-and-802.1x
—Enables 802.1X authentication and MAC address
authentication on the interface.
Default Configuration
Authentication based on the station's MAC address is disabled.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
The guest VLAN must be enabled when MAC authentication is enabled.
Static MAC addresses cannot be authorized. Do not change an authenticated
MAC address to a static address.
It is not recommended to delete authenticated MAC addresses.
Reauthentication must be enabled when working in this mode.
