Table of Contents
Advertisement
D-Link DES-3010FA/GA CLI Reference Guide
dot1x single-host-violation
The dot1x single-host-violation Interface Configuration mode command configures the action to be taken, when
a station whose MAC address is not the supplicant MAC address, attempts to access the interface. Use the no
form of this command to return to default.
Syntax
dot1x single-host-violation {forward | discard | discard-shutdown} [trap seconds]
no port dot1x single-host-violation
Parameters
•
forward — Forwards frames with source addresses that are not the supplicant address, but does not learn
the source addresses.
•
discard — Discards frames with source addresses that are not the supplicant address.
•
discard-shutdown — Discards frames with source addresses that are not the supplicant address. The port
is also shut down.
•
trap — Indicates that SNMP traps are sent.
•
seconds — Specifies the minimum amount of time in seconds between consecutive traps.
(Range: 1- 1000000
Default Configuration
Frames with source addresses that are not the supplicant address are discarded.
No traps are sent.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
The command is relevant when multiple hosts is disabled and the user has been successfully authenticated.
Examples
The following example forwards frames with source addresses that are not the supplicant address and sends con-
secutive traps at intervals of 100 seconds.
Console(config-if)# dot1x single-host-violation forward trap 100
)
Page 337
Advertisement
Table of Contents
