Cisco 300 Series

802.1X Commands
51 OL-32830-01 Command Line Interface Reference Guide
2
User Guidelines
Static MAC addresses cannot be authorized by the MAC-based method.
It is not recommended to change a dynamic MAC address to a static one or delete
it if the MAC address was authorized by the MAC-based authentication:
a. If a dynamic MAC address authenticated by MAC-based authentication is
changed to a static one, it will not be manually re-authenticated.
b. Removing a dynamic MAC address authenticated by the MAC-based
authentication causes its re-authentication.
Example
The following example enables authentication based on 802.1x and the station’s
MAC address
on port gi1 1:
switchxxxxxx(config)# interface gi1 1
switchxxxxxx(config-if)# dot1x authentication 802.1x mac
2.7 dot1x guest-vlan
Use the dot1x guest-vlan Interface Configuration (VLAN) mode command to define
a guest VLAN. Use the no form of this command to restore the default
configuration.
Syntax
dot1x guest-vlan
no dot1x guest-vlan
Parameters
N/A
Default Configuration
No VLAN is defined as a guest VLAN.
Command Mode
Interface (VLAN) Configuration mode