C613-50631-01 Rev A Command Reference for IE340 Series 2185
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
802.1X COMMANDS
DOT
1X MAX-AUTH-FAIL
dot1x max-auth-fail
Overview Use this command to configure the maximum number of login attempts for a
supplicant (client device) using the auth-fail vlan feature, when using 802.1X port
authentication on an interface.
The no variant of this command resets the maximum login attempts for a
supplicant (client device) using the auth-fail vlan feature, to the default
configuration of 3 login attempts.
Syntax
dot1x max-auth-fail <0-10>
no dot1x max-auth-fail
Default The default maximum number of login attempts for a supplicant on an interface
using 802.1X port authentication is 3 login attempts.
Mode Interface Configuration for a static channel, a dynamic (LACP) channel group, or a
switch port; or Authentication Profile mode.
Usage notes This command sets the maximum number of login attempts for supplicants on an
interface. The supplicant is moved to the auth-fail VLAN from the Guest VLAN after
the number of failed login attempts using 802.1X authentication is equal to the
number set with this command.
See the AAA and Port Authentication Feature Overview and Configuration Guide
for information about:
• the auth-fail VLAN feature, and
• restrictions regarding combinations of authentication enhancements
working together
Examples To configure the maximum number of login attempts for a supplicant on interface
port1.0.2 to a single login attempt, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# dot1x max-auth-fail 1
To configure the maximum number of login attempts for a supplicant on interface
port1.0.2 to the default number of 3 login attempts, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no dot1x max-auth-fail
Parameter Description
<0-10> Specify the maximum number of login attempts for supplicants
on an interface using 802.1X port authentication.