Version 8.4.1.0 Introduced on the C-Series and S-Series.
Usage 
Information
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch 
attempts to authenticate again until the maximum attempts configured is reached. If the 
authentication fails after all allowed attempts, the interface moves to the authentication failed 
VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart 
authentication. Authentication occurs at the next reauthentication interval (dot1x 
reauthentication).
Related 
Commands
• dot1x port-control
• dot1x guest-vlan
• show dot1x interface
dot1x auth-server
Configure the authentication server to RADIUS.
C-Series, E-Series, S-Series, S4810
Syntax
dot1x auth-server radius
Defaults none
Command Modes CONFIGURATION
Command History
Version 8.3.12.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on the C-Series and S-Series.
Version 7.4.1.0 Introduced on the E-Series.
dot1x auth-type mab-only
Use only the host MAC address to authenticate a device with MAC authentication bypass (MAB).
C-Series, S-Series, S4810
Syntax
dot1x auth-type mab-only
Defaults Disabled
Command Modes INTERFACE
197