Dot1X Auth-Fail-Vlan - Dell MXL 10GbE Reference Manual

Parameters
all
auth-pae-fsm
backend-fsm
eapol-pdu
interface
interface
Defaults Disabled
Command EXEC Privilege
Modes
Command
Version 9.2(0.0)
History

dot1x auth-fail-vlan

Configure an authentication failure VLAN for users and devices that fail 802.1X authentication.
Syntax
dot1x auth-fail-vlan vlan-id [max-attempts number]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan
vlan-id [max-attempts number] command.
Parameters
vlan-id
max-attempts
number
Defaults 3 attempts
Command CONFIGURATION (conf-if-interface-slot/port)
Modes
Command
Version 9.2(0.0)
History
Usage
If the host responds to 802.1X with an incorrect login/password, the login fails. The
Information
switch attempts to authenticate again until the maximum attempts configured is
reached. If the authentication fails after all allowed attempts, the interface moves
to the authentication failed VLAN.
After the authentication VLAN is assigned, the port-state must be toggled to restart
authentication. Authentication occurs at the next reauthentication interval (dot1x
reauthentication).
126
Enable all 802.1X debug messages.
Enable authentication PAE FSM debug messages.
Enable backend FSM debug messages.
Enable the EAPOL frame trace and related debug messages.
Restricts the debugging information to an interface.
Introduced on the MXL 10/40GbE Switch IO Module.
Enter the VLAN Identifier. The range is from 1 to 4094.
(OPTIONAL) Enter the keywords max-attempts followed
number of attempts desired before authentication fails. The
range is from 1 to 5. The default is 3.
Introduced on the MXL 10/40GbE Switch IO Module.
802.1X