Dot1X Mac-Authentication; Show Dot1X Advanced - Alcatel OS-LS-6224 User Manual

4
Command Line Interface
Related Commands
dot1x guest-vlan

show dot1x advanced

dot1x mac-authentication

The dot1x mac-authentication Interface Configuration command enables
authentication based on the station's MAC address. Use the no form of this
command to disable MAC authentication.
Syntax
dot1x mac-authentication {mac-only | mac-and-802.1x}
no dot1x mac-authentication
Parameters
• mac-only — Enables authentication based on the station's MAC address
only. 802.1X frames are ignored.
• mac-and-802.1x — Enables 802.1X authentication and MAC address
authentication on the interface.
Default
Disabled.
Command Modes
Interface Configuration (Ethernet)
Command Usage
Guest VLAN must be enabled when MAC authentication is enabled.
Static MAC addresses cannot be authorized on a guest VLAN when MAC
authentication is enabled. Do not change an authenticated MAC address to a
static address.
It is not recommended to delete authenticated MAC addresses.
Reauthentication must be enabled when working in this mode.
Example
The following example enables 802.1X authentication and MAC address
authentication on Ethernet port 1/e1.
Console# configure
Console(config)# interface ethernet 1/e1
Console(config-if)# dot1x mac-authentication mac-and-802.1x
show dot1x advanced
The show dot1x advanced Privileged EXEC mode command displays 802.1X
advanced features for the device or specified interface.
Syntax
show dot1x advanced [ethernet interface]
290