Accton Technology ES3528M-SFP manual Dot1x operation-mode, Dot1x re-authenticate, Single-host

Authentication Commands 4

dot1x operation-mode

This command allows single or multiple hosts (clients) to connect to an

802.1X-authorized port. Use the no form with no keywords to restore the default to single host. Use the no form with the multi-hostmax-countkeywords to restore the default maximum count.

Syntax

dot1x operation-mode {single-host multi-host [max-count count]} no dot1x operation-mode [multi-host max-count]

•single-host– Allows only a single host to connect to this port.

•multi-host– Allows multiple host to connect to this port.

•max-count– Keyword for the maximum number of hosts.

-count – The maximum number of hosts that can connect to a port. (Range: 1-1024; Default: 5)

Default

Single-host

Command Mode

Interface Configuration

Command Usage

•The “max-count” parameter specified by this command is only effective if the dot1x mode is set to “auto” by the dot1x port-control command (page 4-114).

•In “multi-host” mode, only one host connected to a port needs to pass authentication for all other hosts to be granted network access. Similarly, a port can become unauthorized for all hosts if one attached host fails re-authentication or sends an EAPOL logoff message.

Example

Console(config)#interface eth 1/2 Console(config-if)#dot1x operation-mode multi-host max-count 10 Console(config-if)#

dot1x re-authenticate

This command forces re-authentication on all ports or a specific interface.

Syntax

dot1x re-authenticate [interface]

interface

•ethernet unit/port

-unit - Stack unit. (Range: 1)

-port - Port number. (Range: 1-28)

4-115