Dot1X Auth-Fail Max-Attempts - Cisco Catalyst 3560X-24P Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

dot1x auth-fail max-attempts

Use the dot1x auth-fail max-attempts interface configuration command on the switch stack or on a
standalone switch to configure the maximum allowable authentication attempts before a port is moved
to the restricted VLAN. To return to the default setting, use the no form of this command.
Syntax Description
max-attempts
Defaults
The default value is 3 attempts.
Command Modes Interface configuration
Command History Release
12.2(53)SE2
Usage Guidelines If you reconfigure the maximum number of authentication attempts allowed by the VLAN, the change
takes effect after the re-authentication timer expires.
Examples This example shows how to set 2 as the maximum number of authentication attempts allowed before the
port is moved to the restricted VLAN on port 3:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface gigabitethernet1/0/3
Switch(config-if)# dot1x auth-fail max-attempts 2
Switch(config-if)# end
Switch(config)# end
Switch#
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
OL-21522-02
dot1x auth-fail max-attempts max-attempts
no dot1x auth-fail max-attempts
Specify a maximum number of authentication attempts allowed before a port
is moved to the restricted VLAN. The range is 1 to 3, the default value is 3.
Modification
This command was introduced.
Catalyst 3750-X and 3560-X Switch Command Reference
dot1x auth-fail max-attempts
2-155