Cisco Catalyst 2950

2-89
Catalyst 2950 and Catalyst 2955 Switch Command Reference
OL-10102-01
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
dot1x auth-fail max-attempts
dot1x auth-fail max-attempts
Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum
number of authentication attempts allowed before a port is moved to the restricted VLAN. To return to
the default setting, use the no form of this command.
dot1x auth-fail max-attempts max-attempts
no dot1x auth-fail max-attempts
Syntax Description
Defaults The default is 3 attempts.
Command Modes Interface configuration
Command History
Usage Guidelines If you reconfigure the maximum number of authentication failures allowed by the VLAN, the change
takes effect after the re-authentication timer expires.
Examples This example shows how to set 2 as the maximum number of authentication attempts allowed before the
port is moved to the restricted VLAN on Gigabit Ethernet interface 1:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# dot1x auth-fail max-attempts 2
Switch(config-if)# end
Switch(config)# end
Switch#
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands
max-attempts Specify a maximum number of authentication attempts allowed before a port
is moved to the restricted VLAN. The range is 1 to 3.
Release Modification
12.1(22)EA7 This command was introduced.
Command Description
dot1x auth-fail vlan [vlan id] Enables the optional restricted VLAN feature.
show dot1x [interface interface-id] Displays IEEE 802.1x status for the specified port.