Service Manual

Usage Information
The prerequisites for enabling MAB-only authentication on a port are:
• Enable 802.1X authentication globally on the switch and on the port (the dot1x authentication
command).
• Enable MAC authentication bypass on the port (the dot1x mac-auth-bypass command).
In MAB-only authentication mode, a port authenticates using the host MAC address even though
802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed in the guest VLAN (if
configured).
To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only command.
Related Commands dot1x mac-auth-bypass — Enables MAC authentication bypass.
dot1x authentication (Configuration)
Enable dot1x globally. Enable dot1x both globally and at the interface level.
Syntax
dot1x authentication
To disable dot1x on a globally, use the no dot1x authentication command.
Defaults Disabled
Command Modes CONFIGURATION
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Related Commands dot1x authentication (Interface) — Enables dot1x on an interface.
dot1x authentication (Interface)
Enable dot1x on an interface. Enable dot1x both globally and at the interface level.
Syntax
dot1x authentication
To disable dot1x on an interface, use the no dot1x authentication command.
Defaults Disabled
Command Modes INTERFACE
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Related Commands dot1x authentication (Configuration) — Enable dot1x globally.
802.1X 123