Dot1X Operation-Mode - Edge-Core ECS3510-26P Management Manual

This command allows hosts (clients) to connect to an 802.1X-authorized
dot1x
port. Use the no form with no keywords to restore the default to single
operation-mode
host. Use the no form with the multi-host max-count keywords to
restore the default maximum count.
S
YNTAX
D
EFAULT
Single-host
C
OMMAND
Interface Configuration
C
OMMAND
◆
◆
◆
E
XAMPLE
Console(config)#interface eth 1/2
Console(config-if)#dot1x operation-mode multi-host max-count 10
Console(config-if)#
dot1x operation-mode {single-host |
multi-host [max-count count] | mac-based-auth}
no dot1x operation-mode [multi-host max-count]
single-host – Allows only a single host to connect to this port.
multi-host – Allows multiple host to connect to this port.
max-count – Keyword for the maximum number of hosts.
count – The maximum number of hosts that can connect to a
port. (Range: 1-1024; Default: 5)
mac-based – Allows multiple hosts to connect to this port, with
each host needing to be authenticated.
M
ODE
U
SAGE
The "max-count" parameter specified by this command is only effective
if the dot1x mode is set to "auto" by the
In "multi-host" mode, only one host connected to a port needs to pass
authentication for all other hosts to be granted network access.
Similarly, a port can become unauthorized for all hosts if one attached
host fails re-authentication or sends an EAPOL logoff message.
In "mac-based-auth" mode, each host connected to a port needs to
pass authentication. The number of hosts allowed access to a port
operating in this mode is limited only by the available space in the
secure address table (i.e., up to 1024 addresses).
– 649 –
| Authentication Commands
C 23
HAPTER
802.1X Port Authentication
dot1x port-control command.