set protocols dot1x interface auth-mode

The set protocols dot1x interface auth-mode command configures the authentication mode.

NOTE:

This command is supported from PICOS 2.11.16.

Command Syntax

set protocols dot1x interface <interface-name> auth-mode <dot1x | mac-radius | dot1x-mac-radius>

Parameter

Parameter

Description

interface <interface-name>

Specifies the physical interface name. The value is a string.

auth-mode <dot1x | mac-radius | dot1x-mac-radius>

Specifies the authentication mode. The value could be dot1x, mac-radius or dot1x-mac-radius.

dot1x: only enables 802.1X authentication mode.
mac-radius: only enables MAB authentication mode.
dot1x-mac-radius: enables both the 802.1X and MAB authentication mode.

The default authentication mode is dot1x.

Usage Guidelines

The 802.1X authentication and MAB authentication are independent functions. You can enable only one of them, or enable both of them.

When both authentication modes are enabled, the MAB authentication will take precedence over 802.1X. If the MAB authentication passes, the system will not do 802.1X authentication, and the port will only be opened to the traffic with the authenticated source MAC address. However, if MAB authentication has failed, PICOS will then fallback to the 802.1X authentication process.

Example

Configure the MAB authentication mode on interface ge-1/1/1.

admin@Xorplus# set protocols do1x interface ge-1/1/1 auth-mode mac-radius
admin@Xorplus# commit