Reference Guide

Version 7.6.1.0 Introduced on the C-Series and S-Series.

Version 7.4.1.0 Introduced on the E-Series.

dot1x auth-type mab-only

To authenticate a device with MAC authentication bypass (MAB), only use the host MAC address.

S4820T

Syntax

dot1x auth-type mab-only

Defaults Disabled

Command Modes INTERFACE

Command History

This guide is platform-specific. For command information about other platforms, refer to the

relevant

FTOS Command Line Reference Guide

The following is a list of the FTOS version history for this command.

Version 8.3.19.0 Introduced on the S4820T.

Version 8.3.12.0 Introduced on the S4810.

Version 8.3.11.1 Introduced on the Z9000.

Version 8.4.2.1 Introduced on the C-Series and S-Series.

Usage

Information

The prerequisites for enabling MAB-only authentication on a port are:

• Enable 802.1X authentication globally on the switch and on the port (the dot1x

authentication

command).

• Enable MAC authentication bypass on the port (the dot1x mac-auth-bypass

command).

In MAB-only authentication mode, a port authenticates using the host MAC address even

though 802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed

in the guest VLAN (if configured).

To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-

only

command.

Commands

dot1x mac-auth-bypass

160