Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Configuring Static MAC Bypass of Authentication (CLI Procedure)

You can configure a static MAC bypass list (sometimes called the exclusion list) on the switch to specify MAC addresses of devices allowed access to the LAN without 802.1X or MAC RADIUS authentication requests to the RADIUS server.

To configure the static MAC bypass list:

  • Specify a MAC address to bypass authentication:
    [edit protocols dot1x]
    user@switch# set authenticator static 00:04:0f:fd:ac:fe
  • Configure a supplicant to bypass authentication if connected through a particular interface:
    [edit protocols dot1x]
    user@switch# set authenticator static 00:04:0f:fd:ac:fe interface ge-0/0/5
  • You can configure a supplicant to be moved to a specific VLAN after it is authenticated:
    [edit protocols dot1x]
    user@switch# set authenticator static 00:04:0f:fd:ac:fe interface ge-0/0/5 vlan-assignment default-vlan

Published: 2014-04-23