Service Manual
Version Description
7.4.1.0 Introduced on the E-Series.
dot1x auth-type mab-only
To authenticate a device with MAC authentication bypass (MAB), only use the host MAC address.
Syntax
dot1x auth-type mab-only
Defaults Disabled
Command Modes INTERFACE
Command History
This guide is platform-specic. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.8(0.0) Introduced on the S3048-ON and S4048-ON.
9.7(0.0) Introduced on the S6000–ON.
9.0.2.0 Introduced on the S6000.
9.0.0.0 Introduced on the Z9000.
8.3.19.0 Introduced on the S4820T.
8.3.12.0 Introduced on the S4810.
8.3.11.1 Introduced on the Z9000.
8.4.2.1 Introduced on the C-Series and S-Series.
Usage Information
The prerequisites for enabling MAB-only authentication on a port are:
• Enable 802.1X authentication globally on the switch and on the port (the dot1x authentication
command).
• Enable MAC authentication bypass on the port (the dot1x mac-auth-bypass command).
In MAB-only authentication mode, a port authenticates using the host MAC address even though
802.1xauthentication is enabled. If the MAB-only authentication fails, the host is placed in the guest VLAN (if
congured).
To disable MAB-only authentication on a port, enter the no dot1x auth-type mab-only command.
Related Commands dot1x mac-auth-bypass — Enable MAC authentication bypass.
174
802.1X