Cisco Catalyst 3750 - Dot1 X Host-Mode

2-146
Catalyst 3750 Switch Command Reference
OL-8552-07
Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
dot1x host-mode
dot1x host-mode
Use the dot1x host-mode interface configuration command to allow a single host (client) or multiple
hosts on an IEEE
802.1x-authorized port. Use the multi-domain keyword to enable multidomain
authentication (MDA) on an IEEE
802.1x-authorized port. Use the no form of this command to return
to the default setting.
dot1x host-mode {multi-host | single-host | multi-domain}
no dot1x host-mode [multi-host | single-host | multi-domain}
Syntax Description
Defaults The default is single-host mode.
Command Modes Interface configuration
Command History
Usage Guidelines Use this command to limit an IEEE 802.1x-enabled port to a single client or to attach multiple clients to
an IEEE 802.1x-enabled port. In multiple-hosts mode, only one of the attached hosts needs to be
successfully authorized for all hosts to be granted network access. If the port becomes unauthorized
(re-authentication fails or an Extensible Authentication Protocol over LAN [EAPOL]-logoff message is
received), all attached clients are denied access to the network.
Use the multi-domain keyword to enable MDA on a port. MDA divides the port into both a data domain
and a voice domain. MDA allows both a data device and a voice device, such as an IP phone (Cisco or
non-Cisco), on the same IEEE 802.1x-enabled port.
Before entering this command, make sure that the dot1x port-control interface configuration command
is set to auto for the specified port.
Examples This example shows how to enable IEEE 802.1x authentication globally, to enable IEEE 802.1x
authentication on a port, and to enable multiple-hosts mode:
Switch(config)# dot1x system-auth-control
Switch(config)# interface gigabitethernet2/0/1
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x host-mode multi-host
multi-host Enable multiple-hosts mode on the switch.
single-host Enable single-host mode on the switch.
multi-domain Enable MDA on a switch port.
Release Modification
12.1(14)EA1 This command was introduced. It replaces the dot1x multiple-hosts
interface configuration command.
12.2(35)SE The multi-domain keyword was added.