configure netlogin authentication protocol-order

configure netlogin authentication protocol-order [dot1x [mac web-based | web-based mac] | [mac [dot1x web-based | web-based dot1x] | [web-based [dot1x mac | mac dot1x]


Globally configures the order of the network login port‘s authentication protocols.

Syntax Description

dot1x Configures the 802.1x authentication protocol preference.
mac Configures the MAC-based authentication protocol preference.
web-based Configures the web-based authentication protocol preference.


By default, the protocol precedence order for a netlogin enabled port is

  • Dot1x
  • Web-based
  • MAC

Usage Guidelines

Web-based authentication occurs only when the port belongs to the netlogin VLAN (Virtual LAN).

When you change the protocol precedence, the action for the current highest precedence protocol takes effect immediately if the client is authenticated by this protocol.

When you disable the highest precedence protocol on a port, the action for the next precedence protocol takes effect immediately if client is authenticated by this protocol.


The following example sets the protocol precedence order to Dot1x, Web-based, and MAC.

configure netlogin authentication protocol-order dot1x web-based mac


This command was first available in ExtremeXOS 15.7.1.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X620, X690, X870 series switches.