Dot1X Auth-Fail-Vlan - Dell S6100 Configuration Manual

dot1x auth-fail-vlan

Configure an authentication failure VLAN for users and devices that fail 802.1X authentication.
Syntax dot1x auth-fail-vlan vlan-id [max-attempts number]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-
attempts number] command.
Parameters
vlan-id
max-attempts
number
Defaults 3 attempts
Command Modes CONFIGURATION (conf-if-interface-slot/port)
Command History
This guide is platform-specific. For command information about other platforms, see the relevant Dell Networking
OS Command Line Reference Guide.
Version
9.10(0.0)
9.8(1.0)
9.8(0.0P5)
9.8(0.0P2)
9.7(0.0)
9.2(1.0)
9.0.2.0
8.3.19.0
8.3.7.0
7.6.1.0
Usage Information
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch attempts to
authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed
attempts, the interface is moved to the authentication failed VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart authentication. Authentication
occurs at the next re-authentication interval (dot1x reauthentication).
Related Commands
•
•
•
Enter the VLAN Identifier. The range is from 1 to 4094.
(OPTIONAL) Enter the keywords max-attempts then number of attempts desired
before authentication fails. The range is from 1 to 5. The default is 3.
Description
Introduced on the S6100-ON.
Introduced on the Z9100-ON.
Introduced on the S4048-ON.
Introduced on the S3048-ON.
Introduced on the S6000–ON.
Introduced on the Z9500.
Introduced on the S6000.
Introduced on the S4820T.
Introduced on the S4810.
Introduced on the C-Series, S-Series, and E-Series.
dot1x port-control — enables port-control on an interface.
dot1x guest-vlan — configures a guest VLAN for non-dot1x devices.
show dot1x interface — displays the 802.1X information on an interface.
Security 1425