Configuring An Authentication-Fail Vlan - Dell Force10 S4810P Configuration Manual

Configuring an Authentication-fail VLAN

If the supplicant fails authentication, the authenticator re-attempts to authenticate after a specified amount
of time (30 seconds by default, see
configure the maximum number of times the authenticator re-attempts authentication after a failure (3 by
default), after which the port is placed in the Authentication-fail VLAN.
Configure a port to be placed in the VLAN after failing the authentication process as specified number of
times using the command
Configure the maximum number of authentication attempts by the authenticator using the keyword
max-attempts
FTOS(conf-if-Te-2/1)#dot1x guest-vlan 200
FTOS(conf-if-Te 2/1)#show config
!
interface TenGigabitEthernet 2/1
switchport
dot1x authentication
dot1x guest-vlan 200
no shutdown
FTOS(conf-if-Te-2/1)#
FTOS(conf-if-Te-2/1)#dot1x auth-fail-vlan 100 max-attempts 5
FTOS(conf-if-Te-2/1)#show config
!
interface TenGigabitEthernet 2/1
switchport
dot1x authentication
dot1x guest-vlan 200
dot1x auth-fail-vlan 100 max-attempts 5
no shutdown
FTOS(conf-if-Te-2/1)#
View your configuration using the command
example in
Privilege mode as shown in the example below.
FTOS(conf-if-Te 2/1)#dot1x port-control force-authorized
FTOS(conf-if-Te 2/1)#show dot1x interface TenGigabitEthernet 2/1
802.1x information on Te 2/1:
-----------------------------
Dot1x Status:
Port Control:
Port Auth Status:
Re-Authentication:
Untagged VLAN id:
Guest VLAN:
Guest VLAN id:
Auth-Fail VLAN:
100
| 802.1X
Configuring a Quiet Period after a Failed
dot1x auth-fail-vlan
with this command.
Configuring a Guest VLAN, or using the command
Enable
FORCE_AUTHORIZED
UNAUTHORIZED
Disable
None
Disabled
200
Disabled
from INTERFACE mode, as shown in the example below.
from INTERFACE mode, as shown in the
show config
show dot1x interface
Authentication). You can
command from EXEC