Cisco 300 Series User Manual

802.1X Commands
OL-32830-01 Command Line Interface Reference Guide 76
2
Example
switchxxxxxx# dot1x unlock client gi11 00:01:12:af:00:56
2.30 dot1x violation-mode
Use the dot1x violation-mode Interface Configuration mode command to configure
the action to be taken when an unauthorized host on authorized port in single-host
mode attempts to access the interface. Use the no form of this command to return
to default.
Syntax
dot1x violation-mode {restrict
| protect | shutdown} [traps seconds ]
no dot1x violation-mode
Parameters
• restrict—Generates a trap when a station, whose MAC address is not the
supplicant MAC address, attempts to access the interface. The minimum
time between the traps is 1 second. Those frames are forwarded but their
source addresses are not learned.
• protect—Discard frames with source addresses that are not the supplicant
address.
• shutdown—Discard frames with source addresses that are not the
supplicant address and shutdown the port.
• trap seconds - Send SNMP traps, and specifies the minimum time between
consecutive traps. If seconds = 0 traps are disabled. If the parameter is not
specified, it defaults to 1 second for the restrict mode and 0 for the other
modes.
Default Configuration
Protect
Command Mode
Interface (Ethernet) Configuration mode

Cisco 300 Series Specifications

General

Model	Cisco 300 Series
Category	Switch
Dimensions	Varies by model
Weight	Varies by model
Power over Ethernet (PoE)	Available on select models
Management	Web-based GUI, SNMP, CLI
VLANs	Up to 256
Security Features	ACLs, 802.1X, Port Security
Humidity	10% to 90% non-condensing
Ports	8, 16, 24, 48