Configuring Dot1X Profile - Dell Z9500 Configuration Manual

In the following example, the bold lines show that 802.1X is enabled.
Dell#show running-config | find dot1x
dot1x authentication
!
[output omitted]
!
interface TenGigabitEthernet 2/1
no ip address
dot1x authentication
no shutdown
!
Dell#
To view 802.1X configuration information for an interface, use the show dot1x interface command.
In the following example, the bold lines show that 802.1X is enabled on all ports unauthorized by default.
Dell#show dot1x interface TenGigabitEthernet 2/1/
802.1x information on Te 2/1/:
-----------------------------
Dot1x Status:
Port Control:
Port Auth Status:
Re-Authentication:
Untagged VLAN id:
Guest VLAN:
Guest VLAN id:
Auth-Fail VLAN:
Auth-Fail VLAN id:
Auth-Fail Max-Attempts: NONE
Mac-Auth-Bypass:
Mac-Auth-Bypass Only:
Tx Period:
Quiet Period:
ReAuth Max:
Supplicant Timeout:
Server Timeout:
Re-Auth Interval:
Max-EAP-Req:
Host Mode:
Auth PAE State:
Backend State:

Configuring dot1x Profile

You can configure a dot1x profile for defining a list of trusted supplicant MAC addresses. A maximum of 10 dot1x profiles can
be configured. The profile name length is limited to 32 characters. Thedot1x profile {profile-name} command sets the
dot1x profile mode and you can enter profile-related commands, such as the mac command.
To configure a dot1x profile, use the following commands.
• Configure a dot1x profile.
CONFIGURATION mode
dot1x profile {profile-name}
profile—name — Enter the dot1x profile name. The profile name length is limited to 32 characters.
Example of Configuring and Displaying a dot1x Profile
Dell(conf)#dot1x profile test
Dell(conf-dot1x-profile)#
Dell#show dot1x profile
802.1x profile information
-----------------------------
Enable
AUTO
UNAUTHORIZED
Disable
None
Disable
NONE
Disable
NONE
Disable
Disable
30 seconds
60 seconds
2
30 seconds
30 seconds
3600 seconds
2
SINGLE_HOST
Initialize
Initialize
802.1X 84