Dell PowerConnect M6348 Configuration Guide - Page 99

The PowerConnect M6220/M6348/M8024 switches support MAC-based 802.1X authentication.

Get Dell PowerConnect M6348 PDF manuals and user guides View all Dell PowerConnect M6348 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 99 highlights

IP address Type Port TimeOut Retran. DeadTime Source IP Prio. Usage 10.27.5.157 Auth 1812 Global Global Global 10.27.65.13 0 all Global values Configured Authentication Servers : 1 Configured Accounting Servers : 0 Named Authentication Server Groups : 1 Named Accounting Server Groups : 0 Timeout : 3 Retransmit : 3 Deadtime : 0 Source IP : 0.0.0.0 RADIUS Attribute 4 Mode : Disable RADIUS Attribute 4 Value : 0.0.0.0 console(config)#aaa authentication login radiusList radius console(config)#aaa authentication dot1x default radius console(config)#dot1x system-auth-control console(config)#interface ethernet 1/g1 console(config-if-1/g1)#dot1x port-control force-authorized console(config-if-1/g1)#exit Example #2: MAC-Based Authentication Mode The PowerConnect M6220/M6348/M8024 switches support MAC-based 802.1X authentication. This feature allows multiple hosts to authenticate on a single port. The hosts are distinguished by their MAC addresses. When multiple hosts (for example, a PC, a printer, and a phone in the same office) are connected to the switch on the same port, each of the connected hosts authenticates separately with the RADIUS server. The following command enables MAC-based authentication on port 1/g8 and limits the number of devices that can authenticate on that port to 3. The switchport mode general command sets the port to allow multiple VLANs to participate in the port. The port must be in general mode in order to enable MAC-based 802.1X authentication. console#configure console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport mode general console(config-if-1/g8)#dot1x port-control mac-based console(config-if-1/g8)#dot1x max-users 3 console(config-if-1/g8)#exit console(config)#exit console#show dot1x ethernet 1/g8 Device Security 99

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
Device Security
99
IP address
Type
Port
TimeOut Retran. DeadTime
Source IP
Prio. Usage
------------- ----- ----- ------- ------- -------- ------------- ----- -----
10.27.5.157
Auth
1812
Global
Global
Global
10.27.65.13
0
all
Global values
Configured Authentication Servers : 1
Configured Accounting Servers : 0
Named Authentication Server Groups : 1
Named Accounting Server Groups : 0
Timeout : 3
Retransmit : 3
Deadtime : 0
Source IP : 0.0.0.0
RADIUS Attribute 4 Mode : Disable
RADIUS Attribute 4 Value : 0.0.0.0
console(config)#aaa authentication login radiusList radius
console(config)#aaa authentication dot1x default radius
console(config)#dot1x system-auth-control
console(config)#interface ethernet 1/g1
console(config-if-1/g1)#dot1x port-control force-authorized
console(config-if-1/g1)#exit
Example #2: MAC-Based Authentication Mode
The PowerConnect M6220/M6348/M8024 switches support MAC-based 802.1X authentication. This
feature allows multiple hosts to authenticate on a single port. The hosts are distinguished by their MAC
addresses.
When multiple hosts (for example, a PC, a printer, and a phone in the same office) are connected to the
switch on the same port, each of the connected hosts authenticates separately with the RADIUS server.
The following command enables MAC-based authentication on port 1/g8 and limits the number of
devices that can authenticate on that port to 3. The
switchport mode general
command sets the
port to allow multiple VLANs to participate in the port. The port must be in general mode in order to
enable MAC-based 802.1X authentication.
console#configure
console(config)#interface ethernet 1/g8
console(config-if-1/g8)#switchport mode general
console(config-if-1/g8)#dot1x port-control mac-based
console(config-if-1/g8)#dot1x max-users 3
console(config-if-1/g8)#exit
console(config)#exit
console#show dot1x ethernet 1/g8