White Papers

Ideally, the dot1x server-timeout value (in seconds) is based on the configured RADIUS-server
timeout and retransmit values and calculated according to the following formula: dot1x server-
timeout seconds > (radius-server retransmit seconds + 1) * radius-server timeout seconds.
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server
retransmit (3 seconds), and radius-server timeout (5 seconds).
Example
DellEMC(conf)# radius-server host 10.11.197.105 timeout 6
DellEMC(conf)# radius-server host 10.11.197.105 retransmit 4
DellEMC(conf)# interface tengigabitethernet 1/1/1/1
DellEMC(conf-if-te-1/1/1/1)# dot1x server-timeout 40
dot1x static-mab
Enable static MAC authorization bypass (MAB) and configure static MAB profile to an interface.
Syntax
[no] dot1x static-mab profile profile-name
Parameters
profile profile-
name
Enter the keyword profile and the profile-name to configure the static MAB
profile name. The profile name length is limited to 32 characters.
Defaults Disabled.
Command Modes
INTERFACE
INTERFACE (BATCH MODE)
Command
History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell
EMC Networking OS Command Line Reference Guide.
Version Description
9.10(0.0) Introduced on the S3148.
9.10(0.0) Introduced on the S3100 series, S4048–ON, S4048–ON, S4810, S4820T, S5000,
S6000, S6000–ON, S6100–ON, the Configuration Terminal Batch mode on C9010,
Z9100–ON, and Z9500.
9.9(0.0) Introduced on the C9010.
Usage
Information
The dot1x static-mab command enables static MAB (mac auth bypass) and configures the
associated profile on a dot1x interface. Static MAB bypasses the authentication server for the supplicant
MAC addresses configured in the associated profile.
Before you enable static MAB, you must do the following:
● Enable MAC authentication bypass on the port by configuring the dot1x mac-auth-bypass
command.
● Ensure that no configured profile exists at the time of configuring the static-mab command.
● Use this command in Interface Batch Mode to enable static MAB in a dual-homing setup.
Example
DellEMC(conf)#do show dot1x interface twentyFiveGigE 1/41
802.1x information on Tf 1/41:
----------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZED (STATIC-MAB)
Re-Authentication: Enable
Untagged VLAN id: 400
Guest VLAN: Enable
Guest VLAN id: 400
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 400
Auth-Fail Max-Attempts: 3
172 802.1X