Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-43
To configure the MAB violation on the interface, run the following commands:
Command Function
configure terminal
Enter the global configuration mode.
interface <interface-id>
Enter the interface configuration mode.
dot1x mac-auth-bypass violation
Set the MAB violation.
end
Return to the privileged mode.
Write
Save the configurations.
show running-config
Show all configurations.
Following example shows how to configure the MAB violation.
DES-7200# configure terminal
DES-7200(config)# interface fa 0/1
DES-7200(config-if)# dot1x mac-auth-bypass violation
Caution
Use the erridisable recover command to restore the MAB violation
port.
The same MAC address for the port in the private vlan appears in
the primary and the secondary VLAN simultaneously, so the MAB
authentication violation shall not be configured on the port in the
private vlan. Or it will lead to the MAB violation judgement error and
influence the normal use.
4.2.35 Configuring Dot1x
Auth-Fail VLAN
With the auth-fail vlan configured on the switch, when the user authentication on the port fails,
the port enters to the auth-fail vlan pre-configured,
To configure the auth-fail VLAN in the interface configuration mode, run the following
commands:
Command Function
configure terminal
Enter the global configuration mode.
interface <interface-id>
Enter the interface configuration mode.
dot1x auth-fail vlan <vid>
Set the auth-fail VLAN on the interface.
end
Return to the privileged mode.
Write
Save the configurations.
show running-config
Show all configurations.
Following example shows how to configure the auth-fail VLAN.
DES-7200# configure terminal