Cisco Systems 3750E Configuring the Host Mode, Dot1x host-mode multi-host, Multi-domain, 10-28

Chapter 10 Configuring IEEE 802.1x Port-Based Authentication

Configuring IEEE 802.1x Authentication

Configuring the Host Mode

Beginning in privileged EXEC mode, follow these steps to allow multiple hosts (clients) on an

IEEE 802.1x-authorized port that has the dot1x port-controlinterface configuration command set to auto. Use the multi-domainkeyword to configure and enable multidomain authentication (MDA), which allows both a host and a voice device, such as an IP phone (Cisco or non-Cisco), on the same switch port. This procedure is optional.

	Command	Purpose
Step 1
	configure terminal	Enter global configuration mode.
Step 2
	interface interface-id	Specify the port to which multiple hosts are indirectly attached, and enter
		interface configuration mode.
Step 3
	dot1x host-mode {multi-host	Allow multiple hosts (clients) on an IEEE 802.1x-authorized port.
	multi-domain}	The keywords have these meanings:
		• multi-host–Allow multiple hosts on an IEEE 802.1x-authorized port
		after a single host has been authenticated.
		• multi-domain–Allow both a host and a voice device, such as an IP
		phone (Cisco or non-Cisco), to be authenticated on an
		IEEE 802.1x-authorized port.
		Note You must configure the voice VLAN for the IP phone when the
		host mode is set to multi-domain. For more information, see
		Chapter 15, “Configuring Voice VLAN.”
		Make sure that the dot1x port-controlinterface configuration command
		set is set to auto for the specified interface.
Step 4
	end	Return to privileged EXEC mode.
Step 5
	show dot1x interface interface-id	Verify your entries.
Step 6
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

To disable multiple hosts on the port, use the no dot1x host-modemulti-hostinterface configuration command.

This example shows how to enable IEEE 802.1x authentication and to allow multiple hosts:

Switch(config)# interface gigabitethernet2/0/1

Switch(config-if)#dot1x port-control auto

Switch(config-if)#dot1x host-mode multi-host

This example shows how to enable MDA and to allow both a host and a voice device on the port:

Switch(config)# interface gigabitethernet3/0/1

Switch(config-if)#dot1x port-control auto

Switch(config-if)#dot1x host-mode multi-domain

Switch(config-if)#switchport voice vlan 101

Switch(config-if)# end

	Catalyst 3750-E and 3560-E Switch Software Configuration Guide
10-28	OL-9775-02