Configuring 802.1X Support For Vxlan Evpn - Cisco Nexus 9000 Series Configuration Manual

Configuring 802.1X Support for VXLAN EVPN

• You must not configure static and secure MAC together.
• The Cisco Nexus 9504 and 9508 switches with -R line cards are not supported.
Configuring 802.1X Support for VXLAN EVPN
This procedure configures 802.1X for VXLAN EVPN.
SUMMARY STEPS
1. configure terminal
2. feature dot1x
3. dot1x mac-move {permit | deny}
4. (Optional) show running-config dot1x all
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
Step 2
feature dot1x
Example:
switch(config)# feature dot1x
Step 3 dot1x mac-move {permit | deny}
Example:
switch(config)# dot1x mac-move permit
Step 4 (Optional) show running-config dot1x all
Example:
switch(config)# show running-config dot1x all
!Command: show running-config dot1x all
!No configuration change since last restart
!Time: Thu Sep 20 10:22:58 2018
version 9.2(2) Bios:version 07.64
feature dot1x
dot1x system-auth-control
dot1x mac-move deny
interface Ethernet1/1
dot1x host-mode multi-auth
dot1x pae authenticator
dot1x port-control auto
no dot1x re-authentication
dot1x max-req 1
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
206
Purpose
Enters global configuration mode.
Enables the 802.1X feature. The default is disabled.
The deny parameters denies MAC moves. The permit
parameter permits MAC moves.
Displays the 802.1X configuration.
Configuring 802.1X