Authentication Commands 4

Command Usage

The “max-count” parameter specified by this command is only effective if the dot1x mode is set to “auto” by the dot1x port-control command (page 4-105).

In “multi-host” mode, only one host connected to a port needs to pass authentication for all other hosts to be granted network access. Similarly, a port can become unauthorized for all hosts if one attached host fails re-authentication or sends an EAPOL logoff message.

Example

Console(config)#interface eth 1/2 Console(config-if)#dot1x operation-mode multi-host max-count 10 Console(config-if)#

dot1x re-authenticate

This command forces re-authentication on all ports or a specific interface.

Syntax

dot1x re-authenticate [interface]

interface

ethernet unit/port-unit - This is unit 1.-port - Port number. (Range: 1-8)

Command Mode

Privileged Exec

Example

Console#dot1x re-authenticate

Console#

dot1x re-authentication

This command enables periodic re-authentication for a specified port. Use the no form to disable re-authentication.

Syntax

[no] dot1x re-authentication

Command Mode

Interface Configuration (Ethernet Ports 1-8, Port Channel)

Example

Console(config)#interface eth 1/2

Console(config-if)#dot1x re-authentication

Console(config-if)#

4-81