Cisco ESW 500 - Page 156

Configuring Device Security
Defining 802.1x
ESW 500 Series Switches Administration Guide 145
5
• Action on Violation — Defines the action to be applied to packets arriving in
single-host mode, from a host whose MAC address is not the supplicant MAC
address. The possible field values are:
- Forward — Forwards the packet.
- Discard — Discards the packets. This is the default value.
- Shut Down — Discards the packets and shuts down the port. The ports
remains shut down until reactivated, or until the device is reset.
• Trap s — Indicates if traps are enabled for Multiple Hosts. The possible field
values are:
- Enable — Indicates that traps are enabled for Multiple hosts.
- Disable — Indicates that traps are disabled for Multiple hosts.
• Trap Fre quency — Defines the time period by which traps are sent to the host.
The Trap Frequency (1-1000000) field can be defined only if multiple hosts are
disabled. The default is 10 seconds.
• Status — Indicates the host status. If there is an asterisk *, the port is either not
linked or is down. The possible field values are:
- Not in Auto Mode — Indicates the port is not linked or is down.
- Unauthorized — Indicates that either the port control is Force
Unauthorized and the port link is down, or the port control is Auto but a
client has not been authenticated via the port.
- Force-Authorized — Indicates that the port control is Forced Authorized,
and clients have full port access.
- Single-host Lock — Indicates that the port control is Auto and only a
single client has been authenticated via the port.
- Multiple Hosts — Indicates that the port control is Auto and Multiple
Hosts mode is enabled. One client has been authenticated.
- Multiple Sessions — Indicates that the port control is Auto and Multiple
Sessions mode is enabled. At least one client has been authenticated.
• Number of Violations — Indicates the number of packets that arrived on the
interface in single-host mode, from a host whose MAC address is not the
supplicant MAC address.