Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell Configuration Guide for the S4048–ON System 9.14.2.4

PDF

Disabling 802.1x enabled port

Dell EMC Networking OS provides RADIUS extension commands that enables you to disable 802.1x enabled ports. This command administratively shuts down the port causing the termination of the dot1x user session. This command is useful when a port is known to cause issue in the network and needs to be disabled.

Before disabling the 802.1x enabled port, ensure that the following prerequisites are satisfied:
  • Shared key is configured in NAS for DAC.
  • NAS server listens on the Management IP UDP port 3799 (default) or the port configured through CLI.
  • The user is logged-in through 802.1X enabled physical port and successfully authenticated with Radius Server.
To initiate shutting down of the 802.1x enabled port, the DAC sends a standard CoA request that contains one or more session identification attributes. NAS uses the NAS-port attributes to identify the 802.1x enabled physical port.
  1. Enter the following command to configure the dynamic authorization feature:
    radius dynamic-auth
  2. Enter the following command to disable the 802.1x enabled physical port:
    coa-disable-port
    NAS administratively shuts down the 802.1x enabled port that is hosting the session. You can re-enable this port only through a non-RADIUS mechanism or through bounce-port request.
Dell(conf#)radius dynamic-auth
Dell(conf-dynamic-auth#)coa-disable-port
NAS takes the following actions:
  • validates the CoA request and the session identification attributes.
  • sends a CoA-Nak with an error-cause of 402 (missing attribute), if the CoA request does not contain the NAS-port attribute.
  • returns an error-cause value of 503 (session context not found), if it is not able to retrieve the port information using the NAS-port attribute.
  • sends a CoA-Ack, if it is able to successfully disable the 802.1x enabled port.
  • sends a CoA-Nak with an error-cause value of 506 (resource unavailable), if it is not able to disable the 802.1x enabled port.
  • discards the packet, if simultaneous requests are received for the same NAS Port.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\