Dot1X Mac-Auth-Bypass - Dell S6000 Reference Manual

Command line for the system

Hide thumbs Also See for S6000:

Table of Contents

802.1X authentication is enabled when an interface is connected to the switch. If

the host fails to respond within a designated amount of time, the authenticator

places the port in the guest VLAN.

If a device does not respond within 30 seconds, it is assumed that the device is not

802.1X capable. Therefore, a guest VLAN is allocated to the interface and

authentication for the device occurs at the next re-authentication interval (dot1x

reauthentication).

If the host fails authentication for the designated number of times, the

authenticator places the port in authentication failed VLAN (dot1x auth-fail-

dot1x auth-fail-vlan

dot1x reauthentication

show dot1x interface

dot1x mac-auth-bypass

Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity

Request frame, Dell Networking OS attempts to authenticate the host based on its MAC address.

[no] dot1x mac-auth-bypass

This guide is platform-specific. For command information about other platforms,

refer to the relevant Dell Networking OS Command Line Reference Guide.

The following is a list of the Dell Networking OS version history for this command.

Version 9.0.2.0

Version 8.3.11.4

Version 8.3.7.0

NOTE: The layer 3 portion of guest VLAN and authentication fail VLANs can be

created regardless if the VLAN is assigned to an interface or not. After an

interface is assigned a guest VLAN (which has an IP address), routing through

the guest VLAN is the same as any other traffic. However, the interface may

join/leave a VLAN dynamically.

— configures a VLAN for authentication failures.

— enables periodic re-authentication.

— displays the 802.1X information on an interface.

Introduced on the S6000.

Introduced on the S4820T.

Introduced on the Z9000.

Introduced on the S4810.