dot1x mac-bypass

Function

The dot1x mac-bypass command enables MAC address bypass authentication on an interface.

The undo dot1x mac-bypass command disables MAC address bypass authentication on an interface.

By default, MAC address bypass authentication is disabled on an interface.

Format

In the system view:

dot1x mac-bypass { interface { interface-type interface-number1 [ to interface-number2 ] } &<1-10> }

undo dot1x mac-bypass { interface { interface-type interface-number1 [ to interface-number2 ] } &<1-10> }

In the interface view:

dot1x mac-bypass

undo dot1x mac-bypass

Parameters

Parameter	Description	Value
interface { interface-type interface-number1 [ to interface-number2 ] }	Enables MAC address bypass authentication on the specified interface. interface-type specifies the interface type. interface-number specifies the interface number.	-

Parameter

Description

Value

interface { interface-type interface-number1 [ to interface-number2 ] }

Enables MAC address bypass authentication on the specified interface.

interface-type specifies the interface type.
interface-number specifies the interface number.

Views

System view, Ethernet interface view, GE interface view, MultiGE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, Port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can enable MAC address bypass authentication for terminals (for example, printers) on which the 802.1X client software cannot be installed or used.

After MAC address bypass authentication is enabled on the interface using the dot1x mac-bypass command, the device first performs 802.1X authentication on users. If the user name request times out, the device starts the MAC address authentication process for the users. When 802.1X authentication fails, the device does not start the MAC address authentication process.

Running the dot1x mac-bypass command also enables 802.1X authentication on an interface, and running the undo dot1x mac-bypass command also disables 802.1X authentication on an interface. When you run the dot1x mac-bypass command on an interface that has been enabled with 802.1X authentication, the authentication mode on the interface changes to MAC address bypass authentication.

Prerequisites

802.1X authentication has been enabled globally using the dot1x enable command.

Example

# Enable MAC address bypass authentication on GE0/0/1 in the system view.

<HUAWEI> system-view
[HUAWEI] dot1x mac-bypass interface gigabitethernet 0/0/1

# Enable MAC address bypass authentication on GE0/0/1 in the interface view.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] dot1x mac-bypass