802.1x Commands 535
Default Configuration
Disabled.
Command Mode
Interface configuration (Ethernet) mode
User Guidelines
• Guest VLAN must be enabled, when MAC authentication is enabled.
• Static MAC addresses cannot be aurhorized. Do not change authenticated MAC address to static
address.
• It is not recommended to delete authenticated MAC addresses.
• Reauthentication must be enabled when working in this mode.
Example
The following command enables authentication based on the station’s MAC address.
dot1x traps mac-authentication failure
The dot1x traps mac-authentication failure Global Configuration mode command enables sending
traps when a MAC address was failed in authentication of the 802.1X MAC authentication access
control. Use the no form of this command to disable the traps.
Syntax
• dot1x traps mac-authentication failure
• no dot1x traps mac-authentication failure
Default Configuration
This command has no default configuration.
Command Mode
Global configuration mode.
User Guidelines
There are no user guidelines for this command.
console config-if(Config)# dot1x mac-authentication mac-only
book.book Page 535 Thursday, December 18, 2008 7:40 PM