!
• Dot1x authentication and MAC authentication configured on a VLAN other than the default
VLAN
After you upgrade to FastIron 08.0.20 or later, global configuration for both dot1x authentication and
MAC authentication move under the authentication command, and the first unused VLAN becomes
auth-default-vlan, VLAN 2 in the following example.
For example, before upgrade, with dot1x authentication enabled globally on port 2/1/24 and MAC
authentication enabled globally on port 2/1/23, the configured ports are part of VLANs 600 and 601.
After upgrade, VLAN 600 becomes the auth-default-vlan for prot 2/1/24, and 601 becomes the auth-
default-vlan for port 2/1/23.
vlan 1 name DEFAULT-VLAN by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9
untagged ethe 1/1/18
!
vlan 200 by port
untagged ethe 1/1/15
!
vlan 201 by port
!
vlan 600 by port
untagged ethe 2/1/24 or tagged ethe 2/1/24
!
vlan 601 by port
untagged ethe 2/1/23 or tagged ethe 2/1/23
!
dot1x-enable >> global configuration
enable ethe 2/1/24
!
mac-authentication enable >> global configuration
mac-authentication auth-passwd-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24 >> interface level
dot1x port-control auto
!
interface ethernet 2/1/23 >> interface level
mac-authentication enable
mac-authentication enable-dynamic-vlan
mac-authentication max-accepted-session 32
The following example shows the configuration after the upgrade.
vlan 1 name DEFAULT-VLAN by port
!
vlan 2 by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9
untagged ethe 1/1/18
!
vlan 200 by port
untagged ethe 1/1/15
!
vlan 201 by port
!
vlan 600 by port >> 2/1/24 should be removed
!
vlan 601 by port >> 2/1/23 should be removed
!
authentication
auth-default-vlan 2
Upgrade and Downgrade Considerations
18 FastIron Ethernet Switch Software Upgrade Guide
53-1003632-02
To Next Page
Loading...
Need help?
General
