Dot1X Host-Mode - Cisco Catalyst 4500 Series Command Reference Manual

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches

dot1x host-mode

Use the dot1x host-mode interface configuration command on the switch stack or on a standalone switch
to allow a single host (client) or multiple hosts on an IEEE 802.1x-authorized port. Use the
multi-domain keyword to enable multidomain authentication (MDA) on an IEEE 802.1x-authorized
port. Use the no form of this command to return to the default setting.
Syntax Description
multi-host
single-host
multi-domain
Defaults The default is single-host mode.
Command Modes
Interface configuration mode
Command History Release
12.2(20)EWA
12.2(37)SG
Usage Guidelines
Use this command to limit an IEEE 802.1X-enabled port to a single client or to attach multiple clients
to an IEEE 802.1X-enabled port. In multiple-hosts mode, only one of the attached hosts needs to be
successfully authorized for all hosts to be granted network access. If the port becomes unauthorized
(re-authentication fails or an Extensible Authentication Protocol over LAN [EAPOL]-logoff message is
received), all attached clients are denied access to the network.
Use the multi-domain keyword to enable MDA on a port. MDA divides the port into both a data domain
and a voice domain. MDA allows both a data device and a voice device, such as an IP phone (Cisco or
non-Cisco), on the same IEEE 802.1x-enabled port.
Before entering this command, make sure that the dot1x port-control interface configuration command
is set to auto for the specified port.
You can assign both voice and data VLAN dynamically from the ACS server. No additional
configuration is required to enable dynamic VLAN assignment on the switch.To enable VLAN
assignment, you must configure the Cisco ACS server. For details on configuring the ACS server for
voice VLAN assignment, refer to the "Cisco ACS Configuration for VLAN Assignment" section in the
Catalyst 4500 Series Switch Software Configuration Guide-Release, 12.2(52)SG.
OL-25342 -01
dot1x host-mode {multi-host | single-host | multi-domain}
no dot1x host-mode [multi-host | single-host | multi-domain}
Enables multiple-hosts mode on the switch.
Enables single-host mode on the switch.
Enables MDA on a switch port.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Added support for multiple domains.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
dot1x host-mode
2-207