Quick Reference Guide

510 802.1x Commands
Default Configuration
This command has no default configuration.
Command Mode
Global configuration mode.
User Guidelines
• There are no user guidelines for this command.
Example
The following command enables sending traps when a MAC address was failed in authentication of the
802.1X MAC authentication access control.
dot1x radius-attributes vlan
The dot1x radius-attributes vlan Interface Configuration mode command enables user-based VLAN
assignment. Use the no form of this command to disable user-based VLAN assignment.
Syntax
• dot1x radius-attributes vlan
• no dot1x radius-attributes vlan
Default Configuration
Disabled.
Command Mode
Interface configuration (Ethernet) mode
User Guidelines
• The dot1x radius-attributes vlan command configuration is allowed only when the port is Forced
Authorized.
• RADIUS attributes are supported only in the multiple sessions mode (multiple hosts with
authentication).
• When RADIUS attributes are enabled and the RADIUS Accept message does not contain as an
attribute the supplicant’s VLAN, then the supplicant is rejected.
• Packets to the supplicant are sent untagged.
console config-if(Config)# dot1x traps mac-authentication failure
5400_CLI.book Page 510 Wednesday, December 17, 2008 4:33 PM