Table of Contents
Advertisement
Eenter a name to configure the static MAB profile name. The profile name length is limited to a maximum
of 32 characters.
Example of Static MAB and MAB Profile for an Interface
Dell(conf-if-Te-2/1)#dot1x static-mab profile sample
Dell(conf-if-Te 2/1))#show config
!
interface TenGigabitEthernet 21
switchport
dot1x static-mab profile sample
no shutdown
Dell(conf-if-Te 2/1))#show dot1x interface TenGigabitEthernet 2/1
802.1x information on Te 2/1:
-----------------------------
Dot1x Status:
Port Control:
Port Auth Status:
Re-Authentication:
Untagged VLAN id:
Guest VLAN:
Guest VLAN id:
Auth-Fail VLAN:
Auth-Fail VLAN id:
Auth-Fail Max-Attempts:3
Critical VLAN:
Critical VLAN id:
Mac-Auth-Bypass Only:
Static-MAB:
Static-MAB Profile:
Tx Period:
Quiet Period:
ReAuth Max:
Supplicant Timeout:
Server Timeout:
Re-Auth Interval:
Max-EAP-Req:
Auth Type:
Auth PAE State:
Backend State:
Configuring Critical VLAN
By default, critical-VLAN is not configured. If authentication fails because of a server which is not reachable,
user session is authenticated under critical-VLAN.
To configure a critical-VLAN for users or devices when authenticating server is not reachable, use the
following command.
•
Enable critical VLAN for users or devices
INTERFACE mode
dot1x critical-vlan [{vlan-id}]
Specify a VLAN interface identifier to be configured as a critical VLAN. The VLAN ID range is 1– 4094.
Enable
Auto
AUTHORIZED(STATIC-MAB)
Disable
None
Enable
100
Enable
200
Enable
300
Disable
Enable
Sample
90 seconds
120 seconds
10
30 seconds
30 seconds
7200 seconds
10
SINGLE_HOST
Authenticated
Idle
802.1X
107
Advertisement
Table of Contents
Troubleshooting
