Configuring 802.1X
Command or Action
Step 5
(Optional) dot1x timeout server-timeout seconds
Example:
switch(config-if)# dot1x timeout server-timeout
60
Step 6
(Optional) dot1x timeout supp-timeout seconds
Example:
switch(config-if)# dot1x timeout supp-timeout 20
Step 7
(Optional) dot1x timeout tx-period seconds
Example:
switch(config-if)# dot1x timeout tx-period 40
Step 8
(Optional) dot1x timeout inactivity-period seconds
Example:
switch(config-if)# dot1x timeout inactivity-period
1800
Step 9
exit
Example:
switch(config)# exit
switch#
Step 10
(Optional) show dot1x all
Example:
switch# show dot1x all
Step 11
(Optional) copy running-config startup-config
Example:
switch# copy running-config startup-config
Enabling MAC Authentication Bypass
You can enable MAC authentication bypass on an interface that has no supplicant connected.
Before you begin
Enable the 802.1X feature on the Cisco NX-OS device.
SUMMARY STEPS
1. configure terminal
2. interface ethernet slot/port
Purpose
Sets the number of seconds that the Cisco NX-OS device
waits before retransmitting a packet to the authentication
server. The default is 30 seconds. The range is from 1 to
65535 seconds.
Sets the number of seconds that the Cisco NX-OS device
waits for the supplicant to respond to an EAP request frame
before the Cisco NX-OS device retransmits the frame. The
default is 30 seconds. The range is from 1 to 65535
seconds.
Sets the number of seconds between the retransmission of
EAP request frames when the supplicant does not send
notification that it received the request. The default is the
global number of seconds set for all interfaces. The range
is from 1 to 65535 seconds.
Sets the number of seconds the switch can remain inactive.
The recommended minimum value is1800 seconds.
Exits configuration mode.
Displays the 802.1X configuration.
Copies the running configuration to the startup
configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Enabling MAC Authentication Bypass
195