Dot1X Static-Mab - Dell S6100 Configuration Manual

Usage Information
When you configure the dot1x server-timeout value, take into account the communication medium used to
communicate with an authentication server and the number of RADIUS servers configured. Ideally, the dot1x
server-timeout value (in seconds) is based on the configured RADIUS-server timeout and retransmit values
and calculated according to the following formula: dot1x server-timeout seconds > (radius-server
retransmit seconds + 1) * radius-server timeout seconds.
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3
seconds), and radius-server timeout (5 seconds).
Example
Dell(conf)# radius-server host 10.11.197.105 timeout 6
Dell(conf)# radius-server host 10.11.197.105 retransmit 4
Dell(conf)# interface tengigabitethernet 1/1/1/1
Dell(conf-if-te-1/1/1/1)# dot1x server-timeout 40

dot1x static-mab

Enable static MAC authorization bypass (MAB) and configure static MAB profile to an interface.
Syntax [no] dot1x static-mab profile profile-name
Parameters
profile profile-name
Defaults Disabled.
Command Modes
INTERFACE
INTERFACE (BATCH MODE)
Command History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
Version
9.10(0.0)
9.9(0.0)
Usage Information
The dot1x static-mab command enables static MAB (mac auth bypass) and configures the associated profile
on a dot1x interface. Static MAB bypasses the authentication server for the supplicant MAC addresses configured
in the associated profile.
Before you enable static MAB, you must do the following:
•
•
•
Example Dell(conf)#do show dot1x interface ten gigabit ethernet 0/41
802.1x information on Te 0/41:
----------------------------------------
Enter the keyword profile and the profile-name to configure the static MAB profile
name. The profile name length is limited to 32 characters.
Description
Introduced on the S3100 series, S4048–ON, S4048–ON, S4810, S4820T, S5000, S6000,
S6000–ON, S6100–ON, the Configuration Terminal Batch mode on C9010, Z9100–ON,
and Z9500.
Introduced on the C9010.
Enable MAC authentication bypass on the port by configuring the dot1x mac-auth-bypass command.
Ensure that no configured profile exists at the time of configuring the static-mab command.
Use this command in Interface Batch Mode to enable static MAB in a dual-homing setup.
802.1X 171