White Papers

Table Of Contents
interface twentyFiveGigE 1/2
switchport
dot1x critical-vlan 300
no shutdown
DellEMC#show dot1x interface twentyFiveGigE 1/2
802.1x information on Tf 1/2:
------------------------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZD(MAC-AUTH-BYPASS)
Critical VLAN Enable
Critical VLAN id: 300
Re-Authentication: Disable
Untagged VLAN id: 400
Guest VLAN: Enable
Guest VLAN id: 100
Auth-Fail VLAN: Disable
Auth-Fail VLAN id: NONE
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass: Enable
Mac-Auth-Bypass Only: Enable
Tx Period: 3 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 2
Host Mode: SINGLE_HOST
Auth PAE State: Authenticated
Backend State: Idle
Configuring MAC addresses for a do1x Profile
To configure a list of MAC addresses for a dot1x profile, use the mac command. You can configure 1 to 6 MAC addresses.
● Configure a list of MAC addresses for a dot1x profile.
DOT1X PROFILE CONFIG (conf-dot1x-profile)
mac mac-address
mac-address β€” Enter the keyword mac and type up to the 48– bit MAC addresses using the nn:nn:nn:nn:nn:nn format. A
maximum of 6 MAC addresses are allowed.
The following example configures 2 MAC addresses and then displays these addresses.
DellEMC(conf-dot1x-profile)#mac 00:50:56:AA:01:10 00:50:56:AA:01:11
DellEMC(conf-dot1x-profile)#show config
dot1x profile sample
mac 00:50:56:aa:01:10
mac 00:50:56:aa:01:11
DellEMC(conf-dot1x-profile)#
DellEMC(conf-dot1x-profile)#exit
DellEMC(conf)#
Configuring Request Identity Re-Transmissions
When the authenticator sends a Request Identity frame and the supplicant does not respond, the authenticator waits for 30
seconds and then re-transmits the frame.
The amount of time that the authenticator waits before re-transmitting and the maximum number of times that the
authenticator re-transmits can be configured.
802.1X
87