beautypg.com

Dot1x single-host-violation – Allied Telesis AT-S95 CLI User Manual

Page 384

background image

Page 384

Allied Telesis
AT-S95 Management Software CLI User’s Guide

Parameters

sec — Specify the timeout in seconds. (Range: 30 – 180)

Default Configuration

The guest VLAN is applied immediately.

Command Mode

Global Configuration mode.

User Guidelines

This command is relevant if the guest VLAN is enabled on the port. Configuring the timeout adds delay from
enabling 802.1X (or port up) to the time the switch puts the port in the guest VLAN

Example

The following example configures the delay from enabling 802.1X (or port up) to adding the port to the guest VLAN
to 50 seconds.

dot1x single-host-violation

The dot1x single-host-violation Interface Configuration (Ethernet) mode command configures the action to be
taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the interface.
Use the no form of this command to restore defaults.

Syntax

dot1x single-host-violation {forward | discard | discard-shutdown} [trap seconds]

no port dot1x single-host-violation

Parameters

forward — Forwards frames with source addresses that are not the supplicant address, but does not learn

the source addresses.

discard — Discards frames with source addresses that are not the supplicant address.

discard-shutdown — Discards frames with source addresses that are not the supplicant address. The port

is also shut down.

trap seconds— Indicates that SNMP traps are sent. Specifies the minimum amount of time in seconds

between consecutive traps. (Range: 1- 1000000)

Default Configuration

Frames with source addresses that are not the supplicant address are discarded. No traps are sent.

Command Mode

Interface Configuration (Ethernet) mode

console# configure
console(config)# dot1x guest-vlan timeout 50