802.1x Commands 509dot1x mac-authenticationThe dot1x mac-authentication Interface Configuration mode command enables authentication basedon the station’s MAC address. Use the no form of this command to disable MAC authentication.Syntax• dot1x mac-authentication {mac-only | mac-and-802.1x}• no dot1x mac-authentication• mac-only — Enable authentication based on the station’s MAC address only. 802.1X frames areignored.• mac-and-802.1x — Enable 802.1X authentication and MAC address authentication on theinterface.Default ConfigurationDisabled.Command ModeInterface configuration (Ethernet) modeUser Guidelines• Guest VLAN must be enabled, when MAC authentication is enabled.• Static MAC addresses cannot be aurhorized. Do not change authenticated MAC address to staticaddress.• It is not recommended to delete authenticated MAC addresses.• Reauthentication must be enabled when working in this mode.ExampleThe following command enables authentication based on the station’s MAC address.dot1x traps mac-authentication failureThe dot1x traps mac-authentication failure Global Configuration mode command enables sendingtraps when a MAC address was failed in authentication of the 802.1X MAC authentication accesscontrol. Use the no form of this command to disable the traps.Syntax• dot1x traps mac-authentication failure• no dot1x traps mac-authentication failureconsole config-if(Config)# dot1x mac-authentication mac-only5400_CLI.book Page 509 Wednesday, December 17, 2008 4:33 PM
