506 802.1x Commands
dot1x multiple-hosts
The dot1x multiple-hosts Interface Configuration mode command allows multiple hosts (clients) on an
802.1X-authorized port with the dot1x port-control Interface Configuration mode command set to auto.
Use the no form of this command to return to the default setting.
Syntax
• dot1x multiple-hosts
• no dot1x multiple-hosts
This command has no arguments or keywords.
Default Configuration
Multiple hosts are disabled. If a port would join a port-channel, the state would be multiple hosts as
long as the port is member in the port-channel.
Multiple-hosts must be enabled if the user disables ingress-filtering on this port.
Command Mode
Interface Configuration (Ethernet) mode.
User Guidelines
• This command enables the attachment of multiple clients to a single 802.1X-enabled port. In this
mode, only one of the attached hosts must be successfully authorized for all hosts to be granted
network access. If the port becomes unauthorized, all attached clients are denied access to the
network.
• For unauthenticated VLANs multiple hosts are always enabled.
Examples
The following command allows multiple hosts (clients) on an 802.1X-authorized port.
dot1x single-host-violation
The dot1x single-host-violation Interface Configuration mode command configures the action to be
taken when a station
of which the MAC address is not the supplicant MAC address, attempts to access the
interface. Use the no form of this command to return to default.
console config-if(Config-VLAN)#dot1x multiple-hosts
5400_CLI.book Page 506 Wednesday, December 17, 2008 4:33 PM
To Next Page
Loading...
