Cisco IE-3000-8TC Command Reference

2-94
Cisco IE 3000 Switch Command Reference
OL-13019-01
Chapter 2 IE 3000 Switch Cisco IOS Commands
dot1x mac-auth-bypass
dot1x mac-auth-bypass
Use the dot1x mac-auth-bypass interface configuration command to enable the MAC authentication
bypass feature. Use the no form of this command to disable MAC authentication bypass feature.
dot1x mac-auth-bypass [eap]
no dot1x mac-auth-bypass
Syntax Description
Defaults MAC authentication bypass is disabled.
Command Modes Interface configuration
Command History
Usage Guidelines Unless otherwise stated, the MAC authentication bypass usage guidelines are the same as the
IEEE
802.1x authentication guidelines.
If you disable MAC authentication bypass from a port after the port has been authenticated with its MAC
address, the port state is not affected.
If the port is in the unauthorized state and the client MAC address is not the authentication-server
database, the port remains in the unauthorized state. However, if the client MAC address is added to the
database, the switch can use MAC authentication bypass to re-authorize the port.
If the port is in the authorized state, the port remains in this state until re-authorization occurs.
If an EAPOL packet is detected on the interface during the lifetime of the link, the switch determines
that the device connected to that interface is an IEEE 802.1x-capable supplicant and uses IEEE 802.1x
authentication (not MAC authentication bypass) to authorize the interface.
Clients that were authorized with MAC authentication bypass can be re-authenticated.
For more information about how MAC authentication bypass and IEEE 802.lx authentication interact,
see the “Understanding IEEE 802.1x Authentication with MAC Authentication Bypass” section and the
“IEEE 802.1x Authentication Configuration Guidelines” section in the “Configuring IEEE 802.1x
Port-Based Authentication” chapter of the software configuration guide.
Examples This example shows how to enable MAC authentication bypass and to configure the switch to use EAP
for authentication:
Switch(config-if)# dot1x mac-auth-bypass eap
eap (Optional) Configure the switch to use Extensible Authentication Protocol
(EAP) for authentication.
Release Modification
12.2(44)EX This command was introduced.

Cisco IE-3000-8TC Specifications

General

Switching Capacity	16 Gbps
MAC Address Table Size	8000
Uplink Ports	2 x 10/100/1000Base-T or SFP (Small Form-Factor Pluggable)
Operating Temperature	-40°C to 70°C
Mounting	DIN rail
Ports	8 x Ethernet 10/100Base-TX ports
Jumbo Frame Support	Yes