Component: dot1x

7.19 Stable 2025-May-22 (8 months ago)

• fixed dynamic switch ACL rules on boards with a lot of ports (e.g. CRS520);

7.6 Stable 2022-Oct-17 (3 years ago)

• fixed incorrect error when using "mac-auth";

7.4 Stable 2022-Jul-19 (3 years ago)

• fixed "undo" command for server instances;

7.3 Stable 2022-Jun-06 (3 years ago)

• fixed RADIUS State attribute when client is reauthenticated;
• fixed port based VLAN ID assignment on devices without a switch chip;
• improved server stability when using re-authentication;

7.2 Stable 2022-Mar-31 (3 years ago)

• added "server-fail-vlan-id", "guest-vlan-id" and "reauth-timeout" settings for dot1x server;
• added "src-address", "src-mac-address" and "src-port" settings for dynamic switch rules;
• added NAS-Port-ID attribute for RADIUS Access-Request;

6.48.3 Stable 2021-May-25 (4 years ago)

• fixed "reject-vlan-id" for MAC authentication (introduced in v6.48);
• fixed MAC authentication fallback (introduced in v6.48);

6.48 Stable 2020-Dec-22 (5 years ago)

• accept priority tagged (VLAN 0) EAP packets on dot1x client;
• fixed reauthentication after server rejects a client into VLAN;
• fixed unicast destination EAP packet receiving when a client is running on a bridge port;

6.46.7 Long-term 2020-Sep-07 (5 years ago)

• fixed duplicate EAP request packets for server;
• fixed EAP packet version numbering;

6.47.3 Stable 2020-Sep-01 (5 years ago)

• fixed duplicate EAP request packets for server;
• fixed EAP packet version numbering;

6.47 Stable 2020-Jun-02 (5 years ago)

• added "radius-mac-format" parameter;
• added hex value support for RADIUS switch rules;
• added range "dst-port" support for RADIUS switch rules;
• added support for lower case "mac-auth" RADIUS formats;
• fixed "reject-vlan-id" value range;
• fixed dynamically created switch rule removal when client disconnects;
• fixed port blocking when interface changes state from disabled to enabled;
• improved Dot1X service stability when receiving bogus packets;
• improved debug logging output to "dot1x" topic;
• improved value validation for dynamically created switch rules;

6.46 Stable 2019-Dec-02 (6 years ago)

• added "reject-vlan-id" server parameter (CLI only);
• added support for dynamic switch rules from RADIUS;
• added support for "mac-auth" authentication type (CLI only);