802.1x Commands 385
dot1x multiple-hosts
The
dot1x multiple-hosts
Interface Configuration mode command allows multiple hosts (clients)
on an 802.1X-authorized port, that has the
dot1x port-control
Interface Configuration mode
command set to
auto
. Use the
no
form of this command to return to the default setting.
Syntax
dot1x multiple-hosts
no dot1x multiple-hosts
This command has no arguments or keywords.
Default Configuration
Multiple hosts are disabled. If a port would join a port-channel, the state would be multiple
hosts as long as the port is member in the port-channel.
Multiple-hosts must be enabled if the user wants to disable ingress-filtering on this port.
Command Mode
Interface configuration (Ethernet) mode
User Guidelines
• This command enables the attachment of multiple clients to a single 802.1X-enabled port. In
this mode, only one of the attached hosts must be successfully authorized for all hosts to be
granted network access. If the port becomes unauthorized, all attached clients are denied
access to the network.
• For unauthenticated VLANs multiple hosts are always enabled.
Examples
The following command allows multiple hosts (clients) on an 802.1X-authorized port.
dot1x single-host-violation
The
dot1x single-host-violation
Interface Configuration mode command configures the action to
be taken, when a station whose MAC address is not the supplicant MAC address, attempts to
access the interface. Use the
no
form of this command to return to default.
Syntax
dot1x single-host-violation
{
forward
|
discard |
discard-shutdown
} [
trap
seconds
]
no port dot1x single-host-violation
console config-if(Config-VLAN)#dot1x multiple-hosts