41-11
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 41 Configuring MAC Authentication Bypass
Configuring MAC Authentication Bypass
Successfully set the following ports to Private Vlan 12,30:
3/13
Console> (enable)
Configuring MAC Authentication Bypass on a PVLAN Port
To configure MAC authentication bypass on a PVLAN port, perform these tasks in enabled mode:
This example shows how to configure MAC authentication bypass-enabled on PVLAN port 3/13:
Console> (enable) set pvlan 12 30 3/13
Successfully set the following ports to Private Vlan 12,30:
3/13
Console> (enable) set mac-auth-bypass enable
Mac-Auth-Bypass enabled globally.
Console> (enable) set port mac-auth-bypass 3/13 enable
Mac-Auth-Bypass successfully enabled on port(s) 3/13
Console> (enable)
Displaying MAC Authentication Bypass Information
The show port mac-auth-bypass {mod/port} command displays the port state (such as authenticating,
authenticated, and waiting to learn the source MAC address), and the port’s RADIUS server-specified
VLAN.
To display MAC authentication bypass information, perform these tasks in normal mode:
This example shows how to display MAC authentication bypass information for port 5/1:
Console> (enable) show port mac-auth-bypass 5/1
Port Mac-Auth-Bypass State MAC Address Auth-State Vlan
----- --------------------- ----------------- -------------- -----
5/1 Disabled - - 1
Task Command
Configure the PVLAN on the port. set pvlan primary vlan secondary vlan mod/port
Configure MAC authentication bypass. set mac-auth-bypass {enable | disable}
Configure a PVLAN on a MAC authentication
bypass-enabled port.
set port mac-auth-bypass mod/port {enable |
disable}
Task Command
Display MAC authentication bypass information for all
ports in the switch that have MAC authentication bypass
enabled or for a single port.
show port mac-auth-bypass [mod/port]
Display MAC authentication bypass information for all
ports in the switch that have MAC authentication bypass
enabled or for the port with the specified MAC address.
show mac-auth-bypass {all | config |
mac_address}