Administrator Guide

Related Configuration Tasks

• Configuring Request Identity Re-Transmissions

• Forcibly Authorizing or Unauthorizing a Port

• Re-Authenticating a Port

• Configuring Timeouts

• Configuring a Guest VLAN

• Configuring an Authentication-Fail VLAN

Important Points to Remember

• Dell EMC Networking OS supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and MS-CHAPv2 with

PEAP.

• All platforms support only RADIUS as the authentication server.

• If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server, if configured.

• 802.1X is not supported on port-channels or port-channel members.

• The NAS-Port-Type attribute indicates the type of the physical port of the NAS which is authenticating the user. It is used in Access-

Request packets. The value of this attribute is set as Ethernet (15) for both EAP and MAB supplicants.

Configuring dot1x Profile

You can configure a dot1x profile for defining a list of trusted supplicant MAC addresses. A maximum of 10 dot1x profiles can be

configured. The profile name length is limited to 32 characters. Thedot1x profile {profile-name} command sets the dot1x

profile mode and you can enter profile-related commands, such as the mac command.

To configure a dot1x profile, use the following commands.

• Configure a dot1x profile.

CONFIGURATION mode

dot1x profile {profile-name}

profile—name — Enter the dot1x profile name. The profile name length is limited to 32 characters.

DellEMC(conf)#dot1x profile test

DellEMC(conf-dot1x-profile)#

DellEMC#show dot1x profile

802.1x profile information

-----------------------------

Dot1x Profile test

Profile MACs

00:00:00:00:01:11

Configuring MAC addresses for a do1x Profile

To configure a list of MAC addresses for a dot1x profile, use the mac command. You can configure 1 to 6 MAC addresses.

• Configure a list of MAC addresses for a dot1x profile.

DOT1X PROFILE CONFIG (conf-dot1x-profile)

mac mac-address

mac-address — Enter the keyword mac and type up to the 48– bit MAC addresses using the nn:nn:nn:nn:nn:nn format. A

maximum of 6 MAC addresses are allowed.

The following example configures 2 MAC addresses and then displays these addresses.

DellEMC(conf-dot1x-profile)#mac 00:50:56:AA:01:10 00:50:56:AA:01:11

DellEMC(conf-dot1x-profile)#show config

dot1x profile sample

mac 00:50:56:aa:01:10

802.1X