Users Guide

mac-address — Enter the keyword mac and type up to the 48– bit MAC addresses using the nn:nn:nn:nn:nn:nn format. A maximum
of 6 MAC addresses are allowed.
Example of Conguring a List of MAC Addresses for a dot1x Prole
The following example congures 2 MAC addresses and then displays these addresses.
Dell(conf-dot1x-profile)#mac 00:50:56:AA:01:10 00:50:56:AA:01:11
Dell(conf-dot1x-profile)#show config
dot1x profile sample
mac 00:50:56:aa:01:10
mac 00:50:56:aa:01:11
Dell(conf-dot1x-profile)#
Dell(conf-dot1x-profile)#exit
Dell(conf)#
Conguring the Static MAB and MAB Prole
Enable MAB (mac-auth-bypass) before using the dot1x static-mab command to enable static mab.
To enable static MAB and congure a static MAB prole, use the following commands.
• Congure static MAB and static MAB prole on dot1x interface.
INTERFACE mode
dot1x static-mab profile profile-name
Eenter a name to congure the static MAB prole name. The prole name length is limited to a maximum of 32 characters.
Example of Static MAB and MAB Prole for an Interface
Dell(conf-if-Te-2/1)#dot1x static-mab profile sample
Dell(conf-if-Te 2/1))#show config
!
interface TenGigabitEthernet 21
switchport
dot1x static-mab profile sample
no shutdown
Dell(conf-if-Te 2/1))#show dot1x interface TenGigabitEthernet 2/1
802.1x information on Te 2/1:
-----------------------------
Dot1x Status: Enable
Port Control: Auto
Port Auth Status: AUTHORIZED(STATIC-MAB)
Re-Authentication: Disable
Untagged VLAN id: None
Guest VLAN: Enable
Guest VLAN id: 100
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 200
Auth-Fail Max-Attempts:3
Critical VLAN: Enable
Critical VLAN id: 300
Mac-Auth-Bypass Only: Disable
Static-MAB: Enable
Static-MAB Profile: Sample
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 10
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 7200 seconds
Max-EAP-Req: 10
96
802.1X