Configuring The Host Mode; Configuring Periodic Re-Authentication - Cisco WS-C3020 Software Configuration Manual

Configuring IEEE 802.1x Authentication

Configuring the Host Mode

Beginning in privileged EXEC mode, follow these steps to allow multiple hosts (clients) on an
IEEE 802.1x-authorized port that has the dot1x port-control interface configuration command set to
auto. This procedure is optional.
Command
Step 1 configure terminal
Step 2
interface interface-id
Step 3 dot1x host-mode {single-host |
multi-host}
Step 4 end
Step 5 show dot1x interface interface-id
Step 6
copy running-config startup-config
To disable multiple hosts on the port, use the no dot1x host-mode multi-host interface configuration
command.
This example shows how to enable IEEE 802.1x authentication and to allow multiple hosts:
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x host-mode multi-host

Configuring Periodic Re-Authentication

You can enable periodic IEEE 802.1x client re-authentication and specify how often it occurs. If you do
not specify a time period before enabling re-authentication, the number of seconds between attempts
is 3600.
Beginning in privileged EXEC mode, follow these steps to enable periodic re-authentication of the client
and to configure the number of seconds between re-authentication attempts. This procedure is optional.
Command
Step 1 configure terminal
Step 2 interface interface-id
Step 3
dot1x reauthentication
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
8-28
Chapter 8
Purpose
Enter global configuration mode.
Specify the port to which multiple hosts are indirectly attached, and enter
interface configuration mode.
The keywords have these meanings:
single-host–Allow a single host (client) on an
•
IEEE 802.1x-authorized port.
multi-host–Allow multiple hosts on an IEEE 802.1x-authorized port
•
after a single host has been authenticated.
Make sure that the dot1x port-control interface configuration command
set is set to auto for the specified interface.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Enable periodic re-authentication of the client, which is disabled by
default.
Configuring IEEE 802.1x Port-Based Authentication
OL-8915-03