Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 1063

802.1x NAS Commands Dell EMC Networking N1100-ON/N1500/N2000/N2100-ON/N2200ON/N3000-ON/N3100-ON/N3200-ON Series Switches Local Area Networks (LANs) are often deployed in environments that permit the attachment of unauthorized devices. The networks also permit unauthorized users to attempt to access the LAN through existing equipment. In such environments, the administrator may desire to restrict access to the services offered by the LAN. Port-based network access control makes use of the physical characteristics of LAN infrastructures to provide a means of authenticating and authorizing devices attached to a LAN port. Port-based network access control prevents access to the port in cases in which the authentication and authorization process fails. A port is defined as a single point of attachment to the LAN. The Dell EMC Networking switches support an 802.1x Authenticator service with a local authentication server or authentication using remote RADIUS or TACACS servers. Refer to "AAA Commands" on page 918 for information on configuring connectivity to a RADIUS or TACACS authentication server or to configure the local authentication service. Dell EMC Networking switches also support 802.1X accounting to RADIUS servers. Refer to the "AAA Commands" section to configure RADIUS accounting. MD5 or none is the supported authentication method for communication with an authentication server. Dell EMC Networking does not support encryption of switch initiated authenticator/authentication server communication. However, Dell EMC Networking switches are capable of transporting end-to-end encrypted traffic such as EAP-TLS between a supplicant and an authenticator. 802.1x Monitor Mode Monitor mode is a special mode that can be enabled in conjunction with 802.1X authentication. It allows network access even in case where there is a failure to authenticate but logs the results of the authentication process for diagnostic purposes. The exact details are described in the below sections. The main aim of the monitor mode is to provide a mechanism to the operator Security Commands 1063