Mac Authentication Bypass issue on cat4506 switches

Unanswered Question
Nov 5th, 2008
User Badges:
  • Bronze, 100 points or more

We are migrating from VMPS/URT to MAB on cat4506 switches. Were having a painstaking issue where sometimes after a number of weeks ports get in the UNAUTHENTICATING state, seemingly no longer using MAB as the authenticating process.

Currently we are using the latest IOS

for cat4506 (12.2(46)).

Hints solutions welcomed.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
drolemc Tue, 11/11/2008 - 15:31
User Badges:
  • Silver, 250 points or more

Use the dot1x host-mode interface configuration command on the switch stack or on a standalone switch to allow a single host (client) or multiple hosts on an 802.1x-authorized port that has the dot1x port-control interface configuration command set to auto. Use the no form of this command to return to the default setting. Basically, add this line to your port config:

dot1x host-mode multi-host


This Discussion