Configuring 802.1X and Port-Based Security 535Configuring MAC-Based Authentication ModeThe PowerConnect 7000 Series switches support MAC-based 802.1Xauthentication. This feature allows multiple hosts to authenticate on a singleport. The hosts are distinguished by their MAC addresses.When multiple hosts (for example, a PC, a printer, and a phone in the sameoffice) are connected to the switch on the same port, each of the connectedhosts authenticates separately with the RADIUS server.To configure the switch:1 Enable MAC-based authentication on port 8 and limit the number ofdevices that can authenticate on that port to 3.console#configureconsole(config)#interface gi1/0/8console(config-if-Gi1/0/8)#dot1x port-control mac-basedconsole(config-if-Gi1/0/8)#dot1x max-users 32 Set the port to an 802.1Q VLAN. The port must be in general mode inorder to enable MAC-based 802.1X authentication.console(config-if-Gi1/0/8)#switchport mode generalconsole(config-if-Gi1/0/8)#exitconsole(config)#exit3 View 802.1X information about Port 8.console#show dot1x interface gi1/0/8Administrative Mode............... EnabledDynamic VLAN Creation Mode........ DisabledMonitor Mode...................... DisabledPort Admin Oper Reauth ReauthMode Mode Control Period------- ---------------- ------------ -------- ----------Gi1/0/8 mac-based Authorized FALSE 3600Quiet Period................................... 60Transmit Period................................ 30Maximum Requests............................... 2Max Users...................................... 3VLAN Assigned.................................. 1 (Default)Supplicant Timeout............................. 30
