Mac Address Bypass on Cisco Nexus N9K-C93180YC-EX

[PutmanoAIT]

I planned to deploy Cisco ISE as 802.1X and MAB authentication server in our environment. We have two units of Cisco N9K-C93180YC-EX version 9.2.2 running as server Switches. We would like to configure MAC Address Bypass authentication on connect to Server which running as Trunk and vPC. I'm not sure whether MAC Address Bypass does support on Nexus Trunk and vPC or not. Does anyone have experienced with that?

[gbekmezi-DD · Accepted solution]

From the link below:

Note	Dot1x supports static port-channels.

Note	You must disable 802.1X on FEX and VPC ports, and the unsupported features.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_011001.htm...

Tells me what you want to do is unsupported with VPC, but will work if it's just a static trunk.

[PutmanoAIT]

Thank Gbekmazi.

 So it's not support even we configure it on the physical ports(member of the vPC)?

[PutmanoAIT]

---

@gbekmezi-DD wrote:

From the link below:

Note	Dot1x supports static port-channels.

Note	You must disable 802.1X on FEX and VPC ports, and the unsupported features.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_011001.htm...

Tells me what you want to do is unsupported with VPC, but will work if it's just a static trunk.

---

Thank Gbekmezi.

 So it's not support even we configure it on the physical ports(member of the vPC)?