2
51
User Guidelines
Static MAC addresses cannot be authorized by the MAC-based method.
It is not recommended to change a dynamic MAC address to a static one or delete
it if the MAC address was authorized by the MAC-based authentication:
a. If a dynamic MAC address authenticated by MAC-based authentication is
changed to a static one, it will not be manually re-authenticated.
b. Removing a dynamic MAC address authenticated by the MAC-based
authentication causes its re-authentication.
Example
The following example enables authentication based on 802.1x and the station's
MAC address on port gi 1 1:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
2.7
dot1x guest-vlan
Use the dot1x guest-vlan Interface Configuration (VLAN) mode command to define
a guest VLAN. Use the no form of this command to restore the default
configuration.
Syntax
dot1x guest-vlan
no dot1x guest-vlan
Parameters
N/A
Default Configuration
No VLAN is defined as a guest VLAN.
Command Mode
Interface (VLAN) Configuration mode
interface gi11
dot1x authentication 802.1x mac
OL-32830-01 Command Line Interface Reference Guide
802. 1 X Commands