Reference Guide

802.1X | 191
dot1x auth-type mab-only
c s
Use only the host MAC address to authenticate a device with MAC authentication bypass (MAB).
Syntax
dot1x auth-type mab-only
Defaults
Disabled
Command Modes
INTERFACE
Command
History
Usage
Information
The prerequisites for enabling MAB-only authentication on a port are:
• 802.1X authentication must be enabled globally on the switch and on the port (dot1x
authentication command).
• MAC authentication bypass must be enabled on the port (dot1x mac-auth-bypass command).
In MAB-only authentication mode, a port authenticates using the host MAC address even though
802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed in the guest
VLAN (if configured).
To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only command.
Related
Commands
dot1x authentication (Configuration)
c e s
Enable dot1x globally; dot1x must be enabled both globally and at the interface level.
Syntax
dot1x authentication
To disable dot1x on an globally, use the no dot1x authentication command.
Defaults
Disabled
Command Modes
CONFIGURATION
Command
History
Related
Commands
Version 8.4.2.1 Introduced on the C-Series and S-Series
dot1x mac-auth-bypass
Version 7.6.1.0 Introduced on C-Series and S-Series
Version 7.4.1.0 Introduced on E-Series
dot1x authentication (Interface)