Dot1X Violation-Mode - Cisco Catalyst 3560X-24P Command Reference Manual

dot1x violation-mode

dot1x violation-mode
Use the dot1x violation-mode interface configuration command on the switch stack or on a standalone
switch to configure the violation modes that occur when a new device connects to a port or when a new
device connects to a port after the maximum number of devices are connected to that port.
Syntax Description
shutdown
restrict
protect
Defaults
By default dot1x violation-mode protect is enabled.
Command Modes Interface configuration
Command History Release
12.2(53)SE2
Examples This example shows how to configure an IEEE 802.1x-enabled port as error disabled and to shut down
when a new device connects to the port:
Switch(config-if)# dot1x violation-mode shutdown
This example shows how to configure an IEEE 802.1x-enabled port to generate a system error message
and change the port to restricted mode when a new device connects to the port:
Switch(config-if)# dot1x violation-mode restrict
This example shows how to configure an IEEE 802.1x-enabled port to ignore a new connected device
when it is connected to the port:
Switch(config-if)# dot1x violation-mode protect
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command
show dot1x
Catalyst 3750-X and 3560-X Switch Command Reference
2-188
dot1x violation-mode {shutdown | restrict | protect}
no dot1x violation-mode
Error disables the port or the virtual port on which a new unexpected MAC
address occurs.
Generates a syslog error when a violation error occurs.
Silently discards packets from any new MAC addresses. This is the default
setting.
Modification
This command was introduced.
[interface interface-id]
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Description
Displays IEEE 802.1x status for the specified port.
OL-21522-02