Dell PowerConnect M6348 Configuration Manual page 99

IP address Type
------------- ----- ----- ------- ------- -------- ------------- ----- -----
10.27.5.157 Auth
Global values
Configured Authentication Servers : 1
Configured Accounting Servers : 0
Named Authentication Server Groups : 1
Named Accounting Server Groups : 0
Timeout : 3
Retransmit : 3
Deadtime : 0
Source IP : 0.0.0.0
RADIUS Attribute 4 Mode : Disable
RADIUS Attribute 4 Value : 0.0.0.0
console(config)#aaa authentication login radiusList radius
console(config)#aaa authentication dot1x default radius
console(config)#dot1x system-auth-control
console(config)#interface ethernet 1/g1
console(config-if-1/g1)#dot1x port-control force-authorized
console(config-if-1/g1)#exit
Example #2: MAC-Based Authentication Mode
The PowerConnect M6220/M6348/M8024 switches support MAC-based 802.1X authentication. This
feature allows multiple hosts to authenticate on a single port. The hosts are distinguished by their MAC
addresses.
When multiple hosts (for example, a PC, a printer, and a phone in the same office) are connected to the
switch on the same port, each of the connected hosts authenticates separately with the RADIUS server.
The following command enables MAC-based authentication on port 1/g8 and limits the number of
devices that can authenticate on that port to 3. The switchport mode general command sets the
port to allow multiple VLANs to participate in the port. The port must be in general mode in order to
enable MAC-based 802.1X authentication.
console#configure
console(config)#interface ethernet 1/g8
console(config-if-1/g8)#switchport mode general
console(config-if-1/g8)#dot1x port-control mac-based
console(config-if-1/g8)#dot1x max-users 3
console(config-if-1/g8)#exit
console(config)#exit
console#show dot1x ethernet 1/g8
Port TimeOut Retran. DeadTime
1812 Global Global
Source IP
Global 10.27.65.13
Prio. Usage
0 all
99
Device Security