Reference Guide

dot1x static-mab
Enable static MAC authorization bypass (MAB) and configure static MAB profile to an interface.
C9000 Series
Syntax
[no] dot1x static-mab profile profile-name
Parameters
profile profile-
name
Enter the keyword profile and the profile-name to
configure the static MAB profile name. The profile name
length is limited to 32 characters.
Defaults Disabled.
Command Modes INTERFACE CONFIG
Command History
This guide is platform-specific. For command information about other platforms,
refer to the relevant Dell Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.9(0.0) Introduced on the C9010.
Usage Information
The dot1x static-mab command enables static MAB (mac auth bypass) and
configures the associated profile on a dot1x interface. Static MAB bypasses the
authentication server for the supplicant MAC addresses configured in the
associated profile.
Before you enable static MAB, you must do the following:
• Enable MAC authentication bypass on the port by configuring the dot1x mac-
auth-bypass command.
• Ensure that no configured profile exists at the time of configuring the static-
mab command.
Example
Dell(conf)#do show dot1x interface ten gigabit ethernet 0/41
802.1x information on Te 0/41:
----------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZED (STATIC-MAB)
Re-Authentication: Enable
Untagged VLAN id: 400
Guest VLAN: Enable
Guest VLAN id: 400
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 400
Auth-Fail Max-Attempts: 3
Critical VLAN: Enable
Critical VLAN id: 400
Mac-Auth-Bypass: Disable
Mac-Auth-Bypass Only: Disable
Static-MAB: Enable
Static-MAB Profile: Sample
240
802.1X