Service Manual

Defaults 3 attempts
Command Modes CONFIGURATION (conf-if-interface-slot/port)
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch attempts to
authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed
attempts, the interface moves to the authentication failed VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart authentication.
Authentication occurs at the next reauthentication interval (dot1x reauthentication).
Related Commands
• dot1x port-control — Enables port control on an interface.
• dot1x guest-vlan — Configures a guest VLAN for limited access users or for devices that are not 802.1X
capable.
• show dot1x interface — Displays the 802.1X configuration of an interface.
dot1x auth-server
Configure the authentication server to RADIUS.
Syntax
dot1x auth-server radius
Defaults none
Command Modes CONFIGURATION
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
dot1x auth-type mab-only
To authenticate a device with MAC authentication bypass (MAB), only use the host MAC address.
Syntax
dot1x auth-type mab-only
Defaults Disabled
Command Modes INTERFACE
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
122 802.1X