A) Globally configure dot1x and remove an individual interface from the dot1x process.
B) Configure dot1x on an individual interface, not globally.
Trying to avoid having to add individual MAC addresses to the RADIUS server. Would prefer to add the MAC to an individual interface via port-security. Thus option A above would be the preferred scenario. The interface command "no dot1x port-control" does not give the desired result.
According to DOTx procedure , some commands must be enabled on globally and some configured on interface level but both (including your way) do not work in terms of DOTx, unfortunately.
Global level configuration:
authentication enable >> this global command is mandotary dot1x system-auth-control aaa authentication dot1x default radius aaa authorization network default radius radius server auth x.x.x.x primary name "radius-1" deadtime 15 priority 1 key 7 "xxx" exit
Interface level configuration:
interface Gix/x/x switchport access vlan x authentication port-control auto authentication order dot1x mab authentication priority dot1x mab exit !
Note: latest firmware version required to meet the criteria.
Respectfully,
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
I also have the similar issue, I am trying to implement 802.1x for the user credentials based authorized network, but either of them are not sending any request to the Cloud Radius Server.
DELL-Young E
Moderator
•
5421 Posts
•
37 Points
0
0
Posted November 20th, 2023 21:12
Hello thanks for choosing Dell.
According to DOTx procedure , some commands must be enabled on globally and some configured on interface level but both (including your way) do not work in terms of DOTx, unfortunately.
Global level configuration:
authentication enable >> this global command is mandotary
dot1x system-auth-control
aaa authentication dot1x default radius
aaa authorization network default radius
radius server auth x.x.x.x
primary
name "radius-1"
deadtime 15
priority 1
key 7 "xxx"
exit
Interface level configuration:
interface Gix/x/x
switchport access vlan x
authentication port-control auto
authentication order dot1x mab
authentication priority dot1x mab
exit
!
Note: latest firmware version required to meet the criteria.
Respectfully,
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!