41-6
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 41 Configuring MAC Authentication Bypass
Configuring MAC Authentication Bypass
Configuring MAC Authentication Bypass
These sections describe how to configure MAC authentication bypass:
• Enabling or Disabling MAC Authentication Bypass Globally, page 41-6
• Enabling or Disabling MAC Authentication Bypass on a Port, page 41-6
• Initializing the MAC Authentication Bypass State for a Port, page 41-7
• Reauthenticating the MAC Address for a Port, page 41-7
• Specifying the Shutdown Timeout Period, page 41-7
• Specifying the AuthFail Timeout Period, page 41-8
• Specifying the Reauthentication Timeout Period, page 41-8
• Enabling or Disabling Reauthentication, page 41-9
• Specifying the Security Violation Mode, page 41-9
• Enabling or Disabling MAC Authentication Bypass RADIUS Accounting, page 41-9
• Configuring a PVLAN on a MAC Authentication Bypass-Enabled Port, page 41-10
• Configuring MAC Authentication Bypass on a PVLAN Port, page 41-11
• Displaying MAC Authentication Bypass Information, page 41-11
• Displaying the MAC Authentication Bypass Global Configuration, page 41-12
Enabling or Disabling MAC Authentication Bypass Globally
The default is disabled. To enable or disable MAC authentication bypass globally, perform this task in
privileged mode:
This example shows how to enable MAC authentication bypass globally:
Console> (enable) set mac-auth-bypass enable
Mac-Auth-Bypass enabled globally.
Console> (enable)
Enabling or Disabling MAC Authentication Bypass on a Port
When you enable or disable MAC authentication bypass on a port, you automatically enable or disable
PortFast on the same port. The default is enabled.
To enable or disable MAC authentication bypass on a port, perform this task in privileged mode:
Task Command
Enable or disable MAC authentication bypass globally. set mac-auth-bypass {disable | enable}
Task Command
Enable or disable MAC authentication bypass on a port. set port mac-auth-bypass mod/port
{disable | enable}