Dot1X Radius-Attributes Vlan - Cisco 300 Series Cli Manual

22
342
Syntax
dot1x mac-authentication {
no dot1x mac-authentication
Parameters
•
mac-only—Enables authentication based on the station's MAC address
only. 802.1X frames are ignored.
•
mac-and-802.1x—Enables 802.1X authentication and MAC address
authentication on the interface.
Default Configuration
Authentication based on the station's MAC address is disabled.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
The guest VLAN must be enabled when MAC authentication is enabled.
Static MAC addresses cannot be authorized. Do not change an authenticated
MAC address to a static address.
It is not recommended to delete authenticated MAC addresses.
Reauthentication must be enabled when working in this mode.
Example
The following example enables authentication based on the station's MAC address
on gi1.
switchxxxxxx(config)#
switchxxxxxx(config-if)#

22.23 dot1x radius-attributes vlan

Use the dot1x radius-attributes vlan Interface Configuration mode command to
enable user-based VLAN assignment.
mac-only mac-and-802.1x
|
interface gi1
dot1x mac-authentication mac-only
78-21075-01 Command Line Interface Reference Guide
802. 1 X Commands
}