Authentication Mac-Move Permit - Cisco Catalyst 3750-X Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

authentication mac-move permit

Use the authentication mac-move permit global configuration command to enable MAC move on a
switch. Use the no form of this command to return to the default setting.
Syntax Description
This command has no arguments or keywords.
Defaults MAC move is enabled.
Command Modes Global configuration
Command History Release
12.2(53)SE2
Usage Guidelines The command enables authenticated hosts to move between 802.1x-enabled ports on a switch. For
example, if there is a device between an authenticated host and port, and that host moves to another port,
the authentication session is deleted from the first port, and the host is reauthenticated on the new port.
If MAC move is disabled, and an authenticated host moves to another port, it is not reauthenticated, and
a violation error occurs.
MAC move is not supported on port-security enabled 802.1x ports. If MAC move is globally configured
on the switch and a port security-enabled host moves to an 802.1x-enabled port, a violation error occurs.
Examples
This example shows how to enable MAC move on a switch:
Switch(config)# authentication mac-move permit
Related Commands Command
authentication event
authentication
fallback
authentication
host-mode
authentication open
authentication order
authentication
periodic
OL-29704-01
authentication mac-move permit
no authentication mac-move permit
Modification
This command was introduced.
Description
Sets the action for specific authentication events.
Configures a port to use web authentication as a fallback method for clients
that do not support IEEE 802.1x authentication.
Sets the authorization manager mode on a port.
Enables or disables open access on a port.
Sets the order of authentication methods used on a port.
Enable or disables reauthentication on a port.
Catalyst 3750-X and 3560-X Switch Command Reference
authentication mac-move permit
2-39