Dot1X Violation-Mode - Cisco Catalyst 3560-X Command Reference Manual

dot1x violation-mode

dot1x violation-mode
Syntax Description
Defaults
Command Modes
Command History
Examples
Related Commands
Catalyst 3750-X and 3560-X Switch Command Reference
2-188
Downloaded from www.Manualslib.com
Use the dot1x violation-mode interface configuration command on the switch stack or on a standalone
switch to configure the violation modes that occur when a new device connects to a port or when a new
device connects to a port after the maximum number of devices are connected to that port.
dot1x violation-mode {shutdown | restrict | protect}
no dot1x violation-mode
shutdown Error disables the port or the virtual port on which a new unexpected MAC
address occurs.
restrict Generates a syslog error when a violation error occurs.
protect Silently discards packets from any new MAC addresses. This is the default
setting.
By default dot1x violation-mode protect is enabled.
Interface configuration
Release Modification
12.2(53)SE2 This command was introduced.
This example shows how to configure an IEEE 802.1x-enabled port as error disabled and to shut down
when a new device connects to the port:
Switch(config-if)# dot1x violation-mode shutdown
This example shows how to configure an IEEE 802.1x-enabled port to generate a system error message
and change the port to restricted mode when a new device connects to the port:
Switch(config-if)# dot1x violation-mode restrict
This example shows how to configure an IEEE 802.1x-enabled port to ignore a new connected device
when it is connected to the port:
Switch(config-if)# dot1x violation-mode protect
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Command
show dot1x [interface interface-id]
manuals search engine
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Description
Displays IEEE 802.1x status for the specified port.
OL-21522-02