mac

Commands for 802.1x
443
effect. If the access control mode of the port is macbased or userbased, the
Guest VLAN can be successfully set without taking effect.
Examples：Set Guest-VLAN of port Ethernet1/3 as VLAN 10.
Switch(Config-If-Ethernet1/3)#dot1xguest-vlan 10
38.10 dot1x macfilter enable
Command: dot1x macfilter enable
no dot1x macfilter enable
Function: Enables the dot1x address filter function in the switch; the "no dot1x
macfilter enable" command disables the dot1x address filter function.
Command mode: Global Mode
Default: dot1x address filter is disabled by default.
Usage Guide: When dot1x address filter function is enabled, the switch will filter the
authentication user by the MAC address. Only the authentication request initialed by the
users in the dot1x address filter table will be accepted.
Example: Enabling dot1x address filter function for the switch.
Switch(config)#dot1x macfilter enable
38.11 dot1x macbased port-down-flush
Command: dot1x macbased port-down-flush
no dot1x macbased port-down-flush
Function: Enables this command, when the dot1x certification according to mac is down,
delete the user who passed the certification of the port; The no command does not make
the down operation.
Command mode: Global Mode
Default: The command is not enabled by default.
Usage Guide: When users who passed the certification according to mac changed
among different ports, delete the user for the new certification. The command should be
enable to delete the user.
Example: When the dot1x certification according to mac is down, delete the user who
passed the certification of the port.
Switch(config)#dot1x macbased port-down-flush