Administrator Guide

Security Commands 970
Default Configuration
This command has no default configuration.
Command Mode
Privileged Exec mode
User Guidelines
There are no user guidelines for this command.
dot1x mac-auth-bypass
Use the dot1x mac-auth-bypass command to enable MAB on an interface.
Use the no form of this command to disable MAB on an interface.
Syntax
dot1x mac-auth-bypass
no dot1x mac-auth-bypass
Default Configuration
MAC Authentication Bypass is disabled by default.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
Authentication of a user via mac-auth-bypass will not occur until the "dot1x
time-out guest-vlan-period" timer expires.
When using MAB, configure the user name and password attributes with the
supplicant MAC address using the form XXXXXXXXXXXX where X is an
upper case hexadecimal digit.
Example
The following example sets MAC Authentication Bypass on interface
gigabitethernet 1/0/2:
console(config-if-Gi1/0/2)#dot1x mac-auth-bypass
2CSNXXX_SWUM204.book Page 970 Monday, January 25, 2016 1:25 PM