802.1x Commands 509
dot1x mac-authentication
The dot1x mac-authentication Interface Configuration mode command enables authentication based
on the station’s MAC address. Use the no form of this command to disable MAC authentication.
Syntax
•
dot1x mac-authentication
{
mac-only
|
mac-and-802.1x
}
• no dot1x mac-authentication
•
mac-only
— Enable authentication based on the station’s MAC address only. 802.1X frames are
ignored.
•
mac-and-802.1x
— Enable 802.1X authentication and MAC address authentication on the
interface.
Default Configuration
Disabled.
Command Mode
Interface configuration (Ethernet) mode
User Guidelines
• Guest VLAN must be enabled, when MAC authentication is enabled.
• Static MAC addresses cannot be aurhorized. Do not change authenticated MAC address to static
address.
• It is not recommended to delete authenticated MAC addresses.
• Reauthentication must be enabled when working in this mode.
Example
The following command enables authentication based on the station’s MAC address.
dot1x traps mac-authentication failure
The dot1x traps mac-authentication failure Global Configuration mode command enables sending
traps when a MAC address was failed in authentication of the 802.1X MAC authentication access
control. Use the no form of this command to disable the traps.
Syntax
• dot1x traps mac-authentication failure
• no dot1x traps mac-authentication failure
console config-if(Config)# dot1x mac-authentication mac-only
5400_CLI.book Page 509 Wednesday, December 17, 2008 4:33 PM
To Next Page
Loading...
