How to enable Mac-Auth-Bypass on nexus 3172TQ
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-26-2020 03:44 PM
I've got a Nexus 3172TQ that I want to be able to enable 802.1x Mac-Auth-Bypass on but having no luck figuring it out.
Software BIOS: version 5.3.1 NXOS: version 7.0(3)I7(7) BIOS compile time: 05/17/2019 NXOS image file is: bootflash:///nxos.7.0.3.I7.7.bin NXOS compile time: 8/28/2019 16:00:00 [08/29/2019 00:41:42] Hardware cisco Nexus 3172T Chassis # show dot1x all Sysauthcontrol Enabled Dot1x Protocol Version 2 Dot1x Info for Ethernet1/17 ----------------------------------- PAE = AUTHENTICATOR PortControl = AUTO HostMode = MULTI HOST ReAuthentication = Disabled QuietPeriod = 60 ServerTimeout = 30 SuppTimeout = 30 ReAuthPeriod = 3600 (Locally configured) ReAuthMax = 2 MaxReq = 2 TxPeriod = 30 RateLimitPeriod = 0 Mac-Auth-Bypass = Disabled
Perhaps this version doesn't support MAB?
- Labels:
-
Other Switches
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-05-2020 11:27 AM
Hi,
Try using command "dot1x mac-auth-bypass".
Regards,
Cristian Matei.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-06-2020 04:14 PM
It took that. Thanks. I guess I got too hung up on the ? command help not showing that as an option:
(config-if)# dot1x ? default Configure Dot1x with default values for this port host-mode Role of 802.1x authenticating entity max-reauth-req Maximum Re-authentication Attempts Before Failing max-req Maximum Retries to Initiate Authentication pae Role of 802.1x authenticating entity port-control Port control re-authentication Enable or Disable Reauthentication for this port timeout Various Timeouts
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-02-2025 12:41 AM
Did you finally managed it? I have a Cisco Nexu 3048 with Firmware 7 and also not found that command under dot1x
