Administrator Guide

Configuring 802.1X
Configuring 802.1X on a port is a one-step process.
For more information, refer to Enabling 802.1X.
Related Configuration Tasks
Configuring Request Identity Re-Transmissions
Forcibly Authorizing or Unauthorizing a Port
Re-Authenticating a Port
Configuring Timeouts
Configuring a Guest VLAN
Configuring an Authentication-Fail VLAN
Important Points to Remember
Dell EMC Networking OS supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and MS-
CHAPv2 with PEAP.
All platforms support only RADIUS as the authentication server.
If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server, if
configured.
802.1X is not supported on port-channels or port-channel members.
The NAS-Port-Type attribute indicates the type of the physical port of the NAS which is authenticating the user. It is used in
Access-Request packets. The value of this attribute is set as Ethernet (15) for both EAP and MAB supplicants.
Configuring dot1x Profile
You can configure a dot1x profile for defining a list of trusted supplicant MAC addresses. A maximum of 10 dot1x profiles can be
configured. The profile name length is limited to 32 characters. Thedot1x profile {profile-name} command sets the
dot1x profile mode and you can enter profile-related commands, such as the mac command.
To configure a dot1x profile, use the following commands.
Configure a dot1x profile.
CONFIGURATION mode
dot1x profile {profile-name}
profilename Enter the dot1x profile name. The profile name length is limited to 32 characters.
DellEMC(conf)#dot1x profile test
DellEMC(conf-dot1x-profile)#
DellEMC#show dot1x profile
802.1x profile information
-----------------------------
Dot1x Profile test
Profile MACs
00:00:00:00:01:11
Configuring MAC addresses for a do1x Profile
To configure a list of MAC addresses for a dot1x profile, use the mac command. You can configure 1 to 6 MAC addresses.
Configure a list of MAC addresses for a dot1x profile.
802.1X
83