Dot1x multiple-hosts, Dot1x single-host-violation – Dell PowerEdge M605 User Manual
Page 346
330
802.1x Commands
www
.dell.com | support.dell.com
dot1x multiple-hosts
Use the dot1x multiple-hosts command in Interface Configuration mode to allow multiple hosts
(clients) on an 802.1x-authorized port where the dot1x port-control command is set to auto. Use
the no form of this command to disable multiple hosts.
Syntax
dot1x multiple-hosts
no dot1x multiple-hosts
Default Configuration
Multiple hosts is enabled.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
This command enables the attachment of multiple clients to a single 802.1x-enabled port. In
this mode, only one of the attached hosts must be successfully authorized for all hosts to be
granted network access. If the port becomes unauthorized, all attached clients are denied
access to the network.
To enable port security on a port, ensure that multiple hosts are enabled.
For unauthenticated VLANs, multiple hosts are always enabled.
Example
The following command allows multiple hosts (clients) on an 802.1x-authorized port.
console(config-if-1/g1)#dot1x multiple-hosts
dot1x single-host-violation
Use the dot1x single-host-violation command in Interface Configuration mode to configure the
action to be taken when a station whose MAC address is not the supplicant MAC address attempts
to access the interface. To return to the default setting, use the no form of this command.
Syntax
dot1x single-host-violation {forward|discard|discard-shutdown}[trap seconds]
no dot1x single-host-violation
•
forward — Forward frames with source addresses that are not the supplicant address, but
do not learn the address.
•
discard — Discard frames with source addresses that are not the supplicant address.