Cisco Catalyst 4500 Series Configuration Manual page 471

Chapter 2
mab
To enable and configure MAC authorization bypass (MAB) on a port, use the mab command in interface
configuration mode. To disable MAB, use the no form of this command.
The mab command is totally independent of the effect of the dot1x system-auth control command.
Note
Syntax Description
eap
Command Default Disabled
Command Modes Interface configuration mode
Command History Release
12.2(50)SG
Usage Guidelines When a port is configured for MAB as a fallback method, it operates in a typical dot1X method until a
configurable number of failed attempts to request the identity of the host. The authenticator learns the
MAC address of the host and uses that information to query an authentication server to see whether this
MAC address will be granted access.
Examples
The following example shows how to enable MAB on a port:
Switch(config-if)# mab
Switch(config-if)#
The following example shows how to enable and configure MAB on a port:
Switch(config-if)# mab eap
Switch(config-if)#
The following example shows how to disable MAB on a port:
Switch(config-if)# no mab
Switch(config-if)#
mab [eap]
no mab [eap]
(Optional) Specifies that a full EAP conversation should be used, as opposed to
standard RADIUS Access-Request, Access-Accept conversation.
Modification
This command was introduced.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
mab
2-431