Concept Guide
Figure 9. Multi-Host Authentication Mode
When you congure multi-host mode authentication, the rst client to respond to an identity request is authenticated and subsequent
responses are still ignored. However, because the authenticator expects the possibility of multiple responses, no system log is generated.
After the rst supplicant is authenticated, all end users connected to the authorized port are allowed to access the network.
If the authorized port becomes unauthorized due to re-authentication failure or the supplicant sends an EAPOL logo frame, all connected
end users are denied access to the network.
If you change the host mode on a port that is already authenticated:
• From single-host to multi-host — All devices connected to the port that were previously blocked may access the network; the
supplicant does not re-authenticate.
• From multi-host to single-host — The port restarts the authentication process. The rst end user to respond is authenticated and
allowed access.
Conguring Multi-Host Authentication
To enable multi-host authentication on a port, enter the dot1x host-mode multi-host command in Interface mode. To return to the
default single-host authentication mode, enter the
no dot1x host-mode command. To verify the currently congured authentication
mode, enter the show dot1x interface command.
Dell(conf-if-te-2/1)# dot1x host-mode multi-host
Dell(conf-if-te-2/1)# do show dot1x interface tengigabitethernet 2/1
802.1x information on Te 2/1:
-----------------------------
Dot1x Status: Enable
Port Control: AUTO
802.1X
109