Dot1X Host-Mode - Cisco IE-3000-8TC Command Reference Manual

dot1x host-mode

dot1x host-mode
Use the dot1x host-mode interface configuration command to allow a single host (client) or multiple
hosts on an IEEE 802.1x-authorized port. Use the no form of this command to return to the default
setting.
Syntax Description
multi-host
single-host
Defaults The default is single-host mode.
Command Modes Interface configuration
Command History Release
12.2(44)EX
Usage Guidelines Use this command to limit an IEEE 802.1x-enabled port to a single client or to attach multiple clients to
an IEEE 802.1x-enabled port. In multiple-hosts mode, only one of the attached hosts needs to be
successfully authorized for all hosts to be granted network access. If the port becomes unauthorized
(re-authentication fails or an Extensible Authentication Protocol over LAN [EAPOL]-logoff message is
received), all attached clients are denied access to the network.
Before entering this command, make sure that the dot1x port-control interface configuration command
is set to auto for the specified port.
Examples
This example shows how to enable IEEE 802.1x authentication globally, to enable IEEE 802.1x
authentication on a port, and to enable multiple-hosts mode:
Switch(config)# dot1x system-auth-control
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x host-mode multi-host
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command
show dot1x
Cisco IE 3000 Switch Command Reference
2-92
dot1x host-mode {multi-host | single-host}
no dot1x host-mode [multi-host | single-host}
Enable multiple-hosts mode on the switch.
Enable single-host mode on the switch.
Modification
This command was introduced.
[interface interface-id]
Chapter 2
Description
Displays IEEE 802.1x status for the specified port.
IE 3000 Switch Cisco IOS Commands
OL-13019-01