beautypg.com

Dot1x multiple-hosts, Dot1x single-host-violation – Dell PowerEdge M605 User Manual

Page 346

background image

330

802.1x Commands

www

.dell.com | support.dell.com

dot1x multiple-hosts

Use the dot1x multiple-hosts command in Interface Configuration mode to allow multiple hosts
(clients) on an 802.1x-authorized port where the dot1x port-control command is set to auto. Use
the no form of this command to disable multiple hosts.

Syntax

dot1x multiple-hosts

no dot1x multiple-hosts

Default Configuration

Multiple hosts is enabled.

Command Mode

Interface Configuration (Ethernet) mode

User Guidelines

This command enables the attachment of multiple clients to a single 802.1x-enabled port. In
this mode, only one of the attached hosts must be successfully authorized for all hosts to be
granted network access. If the port becomes unauthorized, all attached clients are denied
access to the network.

To enable port security on a port, ensure that multiple hosts are enabled.

For unauthenticated VLANs, multiple hosts are always enabled.

Example

The following command allows multiple hosts (clients) on an 802.1x-authorized port.

console(config-if-1/g1)#dot1x multiple-hosts

dot1x single-host-violation

Use the dot1x single-host-violation command in Interface Configuration mode to configure the
action to be taken when a station whose MAC address is not the supplicant MAC address attempts
to access the interface. To return to the default setting, use the no form of this command.

Syntax

dot1x single-host-violation {forward|discard|discard-shutdown}[trap seconds]

no dot1x single-host-violation

forward — Forward frames with source addresses that are not the supplicant address, but
do not learn the address.

discard — Discard frames with source addresses that are not the supplicant address.