Administrator Guide
dot1x static-mab
Enable static MAC authorization bypass (MAB) and congure static MAB prole to an interface.
Syntax
[no] dot1x static-mab profile profile-name
Parameters
prole prole-name Enter the keyword profile and the prole-name to congure the static MAB prole
name. The prole name length is limited to 32 characters.
Defaults Disabled.
Command Modes
INTERFACE
INTERFACE (BATCH MODE)
Command History
This guide is platform-specic. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
Version Description
9.10(0.0) Introduced on the S3100 series, S4048–ON, S4048–ON, S4810, S4820T, S5000, S6000,
S6000–ON, the Conguration Terminal Batch mode on C9010, Z9100–ON, and Z9500.
9.9(0.0) Introduced on the C9010.
Usage Information
The dot1x static-mab command enables static MAB (mac auth bypass) and congures the associated prole
on a dot1x interface. Static MAB bypasses the authentication server for the supplicant MAC addresses congured
in the associated prole.
Before you enable static MAB, you must do the following:
•
Enable MAC authentication bypass on the port by conguring the dot1x mac-auth-bypass command.
• Ensure that no congured prole exists at the time of conguring the static-mab command.
• Use this command in Interface Batch Mode to enable static MAB in a dual-homing setup.
Example
Dell(conf)#do show dot1x interface ten gigabit ethernet 0/41
802.1x information on Te 0/41:
----------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: AUTHORIZED (STATIC-MAB)
Re-Authentication: Enable
Untagged VLAN id: 400
Guest VLAN: Enable
Guest VLAN id: 400
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 400
Auth-Fail Max-Attempts: 3
Critical VLAN: Enable
Critical VLAN id: 400
Mac-Auth-Bypass: Disable
Mac-Auth-Bypass Only: Disable
Static-MAB: Enable
Static-MAB Profile: Sample
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
174 802.1X