802.1X Supplicant Bypass - Alcatel-Lucent OmniSwitch 6850-48 Cli Reference Manual

802.1X Commands

802.1x supplicant bypass

Configures whether or not MAC authentication is applied first to any client device (supplicant or non-
supplicant) that is trying to connect through the specified 802.1x port.
802.1x slot/port supplicant bypass {enable | disable}
Syntax Definitions
slot/port
enable
disable
Defaults
By default, supplicant bypass is disabled; 802.1x authentication is attempted first.
Platforms Supported
OmniSwitch 6400, 6850, 6850E, 6855, 9000E
Usage Guidelines
•
Use this command together with the
authentication first on any device and then specify whether or not subsequent 802.1x authentication is
also performed on that same device.
•
This command is only supported on 802.1x ports configured for auto access control mode. See the
802.1x command for more information about configuring the access control mode.
•
Configuring 802.1x supplicant bypass is not allowed on ports where the 802.1x supplicant polling retry
count is set to zero. Both operations are mutually exclusive on the same port.
•
If supplicants are already connected to the specified port when 802.1x bypass is enabled for that port,
the supplicants are automatically logged off to undergo authentication according to the enabled bypass
configuration.
•
When the 802.1x bypass configuration is modified or disabled, any non-supplicant devices are auto-
matically logged off the port. This will free up those devices to undergo the authentication specified by
the new bypass configuration.
•
If re-authentication is configured for the 802.1x port and supplicant bypass is enabled, the MAC
authentication followed by 802.1x authentication are initially performed as configured. However, only
802.1x authentication is performed during the re-authentication process, so there is no recheck to see if
the MAC address of the user device is restricted.
Examples
-> 802.1x 3/1 supplicant bypass enable
-> 802.1x 3/1 supplicant bypass disable
OmniSwitch CLI Reference Guide
The slot and port number of the 802.1x port.
Enables supplicant bypass on the specified port; MAC authentication is
performed first.
Disables supplicant bypass on the specified port; 802.1x authentication
is attempted first.
802.1x non-supplicant allow-eap
June 2012
command to initiate MAC
page 35-9