dot1x enable
dot1x enable ethe 2/1/24
mac-authentication enable
mac-authentication enable ethe 2/1/23
mac-authentication password-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24
authentication auth-default-vlan 600
dot1x port-control auto
!
interface ethernet 2/1/23
authentication auth-default-vlan 601
authentication max-sessions 32
!
• Dot1x authentication and MAC authentication configured on a voice VLAN
After you upgrade to FastIron 08.0.20 or later, global configuration for both dot1x authentication and
MAC authentication moves under the authentication command, and the first unused VLAN moves as
auth-default-vlan (the authentication default VLAN), VLAN 2 in the following example. Any dual-mode
commands on the interface are replaced by the auth-default-vlan at the interface level. The voice-vlan
command remains the same.
For example, before upgrade, with dot1x authentication enabled globally on port 2/1/24 and MAC
authentication enabled globally on port 2/1/23, the configured ports are part of VLANs 100 and 200
respectively as tagged. Both of these ports are also part of voice-vlan VLAN 1000 as tagged. After
upgrade, VLAN 100 becomes auth-default-vlan for port 2/1/24, and VLAN 200 becomes auth-default-
vlan for port 2/1/23. The voice-vlan 1000 command is retained.
vlan 1 name DEFAULT-VLAN by port
!
vlan 3 by port
tagged ethe 1/1/5
!
vlan 100 by port
tagged ethe 1/1/9 ethe 2/1/24
untagged ethe 1/1/18
!
vlan 200 by port
tagged ethe 2/1/23
untagged ethe 1/1/15
!
vlan 1000 by port
tagged ethe 2/1/23 to 2/1/24
!
dot1x-enable >> global configuration
enable ethe 2/1/24
!
mac-authentication enable >> global configuration
mac-authentication auth-passwd-format xxxx.xxxx.xxxx
!
interface ethernet 2/1/24 >> interface level
dot1x port-control auto
dual-mode 100
voice-vlan 1000
!
interface ethernet 2/1/23 >> interface level
mac-authentication enable
mac-authentication enable-dynamic-vlan
mac-authentication max-accepted-session 32
dual-mode 200
voice-vlan 1000
The following example shows the configuration after the upgrade.
FCX_Stack(2U)# sh run vlan
vlan 1 name DEFAULT-VLAN by port
!
vlan 2 by port
!
vlan 3 by port
tagged ethe 1/1/5
Upgrade and Downgrade Considerations
FastIron Ethernet Switch Software Upgrade Guide 19
53-1003632-02