Cisco WS-C6506 - Page 1082

43-4
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 43 Tracking Host Aging
Configuring IP Device Tracking on a Port
Enabling or Disabling IP Device Tracking on a Port with 802.1x Authentication
To enable or disable IP device tracking on a module or port with 802.1x authentication, perform this task
in privileged mode:
This example shows how to enable IP device tracking on a port with 802.1x authentication:
Console> (enable) set port dot1x 3/1 ip-device-tracking enable
Port 3/1 ip-device-tracking option is enabled.
Console> (enable)
This example shows how to view the current conifguration of IP device tracking on a port with 802.1x
authentication:
Console> (enable) show port dot1x 3/13
Port Auth-State BEnd-State Port-Control Port-Status
----- ------------------- ---------- ------------------- -------------
3/13 authenticated idle auto authorized
Port Port-Mode Re-authentication Shutdown-timeout Control-Mode
admin oper
----- ------------- ----------------- ---------------- ---------------
3/13 SingleAuth enabled disabled Both Both
Port Posture-Token Critical-Status Termination action Session-timeout
----- ------------- --------------- ------------------ ---------------
3/13 Healthy no Initialize 3600
Port Session-Timeout-Override Url-Redirect
----- ------------------------ ---------------------------------------
3/13 disabled -
Port Critical ReAuth-When IP-Device-Tracking
----- -------- ----------- ------------------
3/13 disabled 105 enabled
Console> (enable)
Enabling or Disabling IP Device Tracking on a Port with MAC Authentication
Bypass
To enable or disable IP device tracking on a module or port with MAC authentication bypass, perform
this task in privileged mode:
Task Command
Enable or disable IP device tracking on a module or port
with 802.1x authentication. The defualt is disabled.
set port dot1x mod/port
ip-device-tracking {disable | enable}
Task Command
Enable or disable IP device tracking on a module or port
with MAC authentication bypass. The default is disabled.
set port mac-auth-bypass mod/port
ip-device-tracking {disable | enable}