Configuring Static MAC Bypass of Authentication (CLI Procedure)
You can configure a static MAC bypass list (sometimes called the exclusion list) on the switch to specify MAC addresses of devices allowed access to the LAN without 802.1X or MAC RADIUS authentication requests to the RADIUS server.
To configure the static MAC bypass list:
- Specify a MAC address to bypass authentication:
[edit protocols dot1x]
user@switch# set authenticator static 00:04:0f:fd:ac:fe - Configure a supplicant to bypass authentication if connected through a particular interface:
- You can configure a supplicant to be moved to a specific
VLAN after it is authenticated:
[edit protocols dot1x]
user@switch# set authenticator static 00:04:0f:fd:ac:fe interface ge-0/0/5 vlan-assignment default-vlan