Cisco Catalyst 4500 Series Command Reference Guide

2-42
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
OL-27596 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
authentication violation
authentication violation
Use the authentication violation interface configuration command to configure the violation mode:
restrict, shutdown, and replace.
In single-host mode, a security violation is triggered when more than one device are detected on the data
vlan. In multidomain authentication mode, a security violation is triggered when more than one device
are detected on the data or voice VLAN.
Security violation cannot be triggered in multiplehost or multiauthentication mode.
authentication violation { restrict | shutdown | replace}
no authentication violation {restrict | shutdown | replace}
Syntax Description
Defaults Shut down the port. If the restrict keyword is configured, the port does not shutdown.
Command Modes Interface configuration
Command History
Usage Guidelines When a new host is seen in single or multiple- domain modes, replace mode tears down the old session
and authenticates the new host.
Examples This example shows how to configure violation mode shutdown on a switch:
Switch# configure terminal
Switch(config)# authentication violation shutdown
A port is error-disabled when a security violation triggers on shutdown mode. The following syslog
messages displays:
%AUTHMGR-5-SECURITY_VIOLATION: Security violation on the interface <interface name>, new
MAC address <mac-address> is seen.
%PM-4-ERR_DISABLE: security-violation error detected on <interface name>, putting
<interface name> in err-disable state
restrict Generates a syslog error when a violation error occurs.
shutdown Error disables the [virtual] port on which an unexpected MAC address
occurs.
replace Replaces the existing host with the new host, instead of errordisabling or
restricting the port.
Release Modification
12.2(50)SG Command introduced on the Catalyst 4500 series switch.
12.2(54)SG Support for replace keyword.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E