Dell Force10 C150 Configuration Manual page 126

During the authentication process, the Dell Force10 system is able to learn the MAC address of the device
though the EAPoL frames, and the VLAN assignment from the RADIUS server. With this information it
creates an authorized-MAC to VLAN mapping table per port. Then, the system can tag all incoming
untagged frames with the appropriate VLAN-ID based on the table entries.
Task
Enable Multi-Supplicant Authentication mode on a port.
FTOS#show dot1x interface gigabitethernet 1/3 details
802.1x information on Gi 1/3:
-----------------------------
Dot1x Status:
Port Control:
Port Auth Status:
Re-Authentication:
Untagged VLAN id:
Guest VLAN:
Guest VLAN id:
Auth-Fail VLAN:
Auth-Fail VLAN id:
Auth-Fail Max-Attempts:
Tx Period:
Quiet Period:
ReAuth Max:
Supplicant Timeout:
Server Timeout:
Re-Auth Interval:
Max-EAP-Req:
Host Mode:
Auth PAE State:
Backend State:
Supplicants on Gi 1/3:
----------------------
00:01:e9:45:00:03 AUTHENTICATED
00:01:e9:55:00:10 AUTHENTICATING
00:01:e9:B5:00:03 UNAUTHENTICATED
Restrict the number of supplicants that can be
authenticated on the port in multi-auth mode.
Note: On the C-Series, during multi-supplicant authentication, devices that fail authentication may still be
counted towards the maximum number of supplicants supported by 802.1X authentication to access the
port, thus preventing the full number of supplicants to be authenticated.
126 | 802.1X
Enable
AUTO
MULTI-AUTH
Disable
None
Disable
NONE
Disable
NONE
NONE
30 seconds
60 seconds
2
30 seconds
30 seconds
3600 seconds
2
MULTI-AUTH
Initialize
Initialize
Command Syntax
dot1x host-mode multi-auth
Default: Single-host mode
dot1x max-supplicants number
Default: 128
Command Mode
INTERFACE
INTERFACE