C
HAPTER
24
| Authentication Commands
802.1X Port Authentication
– 851 –
DEFAULT
block-traffic
COMMAND MODE
Interface Configuration
COMMAND USAGE
For guest VLAN assignment to be successful, the VLAN must be configured
and set as active (see the vlan database command) and assigned as the
guest VLAN for the port (see the network-access guest-vlan command).
EXAMPLE
Console(config)#interface eth 1/2
Console(config-if)#dot1x intrusion-action guest-vlan
Console(config-if)#
dot1x max-reauth-
req
This command sets the maximum number of times that the switch sends
an EAP-request/identity frame to the client before restarting the
authentication process. Use the no form to restore the default.
SYNTAX
dot1x max-reauth-req count
no dot1x max-reauth-req
count – The maximum number of requests (Range: 1-10)
DEFAULT
2
COMMAND MODE
Interface Configuration
EXAMPLE
Console(config)#interface eth 1/2
Console(config-if)#dot1x max-reauth-req 2
Console(config-if)#
dot1x max-req This command sets the maximum number of times the switch port will
retransmit an EAP request/identity packet to the client before it times out
the authentication session. Use the no form to restore the default.
SYNTAX
dot1x max-req count
no dot1x max-req
count – The maximum number of requests (Range: 1-10)