Install Guide

● Attribute 5—NAS -Port: The port number of the interface being authorized entered as an integer.
● Attribute 30—Called-Station-Id: MAC address of the ingress interfaces of the authenticator.
● Attribute 31—Calling-Station-Id: MAC address of the 802.1X supplicant.
● Attribute 87—NAS-Port-Id: The name of the interface being authorized entered as a string.
NOTE: Only attributes 1 and 2 are used for MAB; Attributes 30 and 31 are not mandatory in the MAB method.
2. Enter INTERFACE mode on an interface or a range of interfaces.
INTERFACE mode
interface [range]
3. Enable MAC authentication bypass.
INTERFACE mode
dot1x mac-auth-bypass
4. (Optional) Use MAB authentication only — do not use 802.1X authentication first. If MAB fails the port or the MAC
address is blocked, the port is placed in the guest VLAN (if configured). 802.1x authentication is not even attempted.
Re-authentication is performed using 802.1X timers.
INTERFACE mode
dot1x mac-auth mab-only
Verify the MAB and 802.1X configuration using the show dot1x interface command from EXEC Privilege mode.
The bold text shows that MAB is enabled on the interface.
DellEMC#show dot1x interface Te 0/0
802.1X information on Te 0/0:
----------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZED(MAC-AUTH-BYPASS)
Re-Authentication: Disable
Untagged VLAN id: 200
Guest VLAN: Disable
Guest VLAN id: NONE
Auth-Fail VLAN: Disable
Auth-Fail VLAN id: NONE
Auth-Fail Max-Attempts: NONE
Critical VLAN: Disable
Critical VLAN id: NONE
Mac-Auth-Bypass: Enable
Mac-Auth-Bypass Only: Disable
Static-MAB: Disable
Static-MAB Profile: NONE
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 2
Host Mode: SINGLE_HOST
Auth PAE State: Authenticated
Backend State: Idle
Dynamic CoS with 802.1X
Class of Service (CoS) is a method of traffic management that groups similar types of traffic so that they are serviced
differently. One way of classifying traffic is 802.1p, which uses the 3-bit Priority field in the VLAN tag to mark frames (other
classification methods include ToS, ACL, and DSCP). Once traffic is classified, you can use Quality of Service (QoS) traffic
management to control the level of service for a class in terms of bandwidth and delivery time.
For incoming traffic, the Dell EMC Networking OS allows you to set a static priority value on a per-port basis or dynamically set
a priority on a per-port basis by leveraging 802.1X.
102
802.1X