White Papers

Table Of Contents
-----------------------------
Dot1x Status: Enable
Port Control: FORCE_AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Guest VLAN: Disabled
Guest VLAN id: 200
Auth-Fail VLAN: Disabled
Auth-Fail VLAN id: 100
Auth-Fail Max-Attempts: 5
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 10
Supplicant Timeout: 15 seconds
Server Timeout: 15 seconds
Re-Auth Interval: 7200 seconds
Max-EAP-Req: 10
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
Configuring dot1x Profile
You can configure a dot1x profile for defining a list of trusted supplicant MAC addresses. A maximum of 10 dot1x profiles can be
configured. The profile name length is limited to 32 characters. Thedot1x profile {profile-name} command sets the
dot1x profile mode and you can enter profile-related commands, such as the mac command.
To configure a dot1x profile, use the following commands.
Configure a dot1x profile.
CONFIGURATION mode
dot1x profile {profile-name}
profilename Enter the dot1x profile name. The profile name length is limited to 32 characters.
DellEMC(conf)#dot1x profile test
DellEMC(conf-dot1x-profile)#
DellEMC#show dot1x profile
802.1x profile information
-----------------------------
Dot1x Profile test
Profile MACs
00:00:00:00:01:11
Configuring the Static MAB and MAB Profile
Enable MAB (mac-auth-bypass) before using the dot1x static-mab command to enable static mab.
To enable static MAB and configure a static MAB profile, use the following commands.
Configure static MAB and static MAB profile on dot1x interface.
INTERFACE mode
dot1x static-mab profile profile-name
Eenter a name to configure the static MAB profile name. The profile name length is limited to a maximum of 32 characters.
DellEMC(conf-if-Te-2/1)#dot1x static-mab profile sample
DellEMC(conf-if-Te 2/1))#show config
!
interface TenGigabitEthernet 21
switchport
dot1x static-mab profile sample
92
802.1X