Command Line Reference Guide

Usage
Information
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch
attempts to authenticate again until the maximum attempts configured is reached. If the
authentication fails after all allowed attempts, the interface moves to the authentication failed
VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart
authentication. Authentication occurs at the next reauthentication interval (dot1x
reauthentication
).
Related
Commands
dot1x port-control
dot1x guest-vlan
show dot1x interface
dot1x auth-server
Configure the authentication server to RADIUS.
S5000
Syntax
dot1x auth-server radius
Defaults none
Command Modes CONFIGURATION
Command History
Version 9.0(1.3) Introduced on the S5000.
dot1x auth-type mab-only
Use only the host MAC address to authenticate a device with MAC authentication bypass (MAB).
S5000
Syntax
dot1x auth-type mab-only
Defaults Disabled
Command Modes INTERFACE
Command History
Version 9.0(1.3) Introduced on the S5000.
Usage
Information
The prerequisites for enabling MAB-only authentication on a port are:
Enable 802.1X authentication globally on the switch and on the port (the dot1x
authentication
command).
153