Install Guide

Configuring 802.1X
Configuring 802.1X on a port is a one-step process.
For more information, refer to Enabling 802.1X.
Related Configuration Tasks
● Configuring Request Identity Re-Transmissions
●
Forcibly Authorizing or Unauthorizing a Port
● Re-Authenticating a Port
● Configuring Timeouts
● Configuring a Guest VLAN
● Configuring an Authentication-Fail VLAN
Important Points to Remember
● Dell EMC Networking OS supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and MS-
CHAPv2 with PEAP.
● All platforms support only RADIUS as the authentication server.
● If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server, if
configured.
● 802.1X is not supported on port-channels or port-channel members.
● The NAS-Port-Type attribute indicates the type of the physical port of the NAS which is authenticating the user. It is used in
Access-Request packets. The value of this attribute is set as Ethernet (15) for both EAP and MAB supplicants.
Enabling 802.1X
Enable 802.1X globally.
Figure 7. 802.1X Enabled
1. Enable 802.1X globally.
CONFIGURATION mode
dot1x authentication
2. Enter INTERFACE mode on an interface or a range of interfaces.
INTERFACE mode
interface [range]
3. Enable 802.1X on the supplicant interface only.
INTERFACE mode
dot1x authentication
Verify that 802.1X is enabled globally and at the interface level using the show running-config | find dot1x command
from EXEC Privilege mode.
In the following example, the bold lines show that 802.1X is enabled.
To view 802.1X configuration information for an interface, use the show dot1x interface command.
In the following example, the bold lines show that 802.1X is enabled on all ports unauthorized by default.
76
802.1X