Administrator Guide

ManualsBrandsDell ManualsAccess PlatformsC9010 Modular Chassis Switch

100

If you change the host mode on a port that is already authenticated:

● From single-host to multi-host — All devices connected to the port that were previously blocked may access the network;

the supplicant does not re-authenticate.

● From multi-host to single-host — The port restarts the authentication process. The first end user to respond is

authenticated and allowed access.

Configuring Multi-Host Authentication

To enable multi-host authentication on a port, enter the dot1x host-mode multi-host command in Interface mode. To

return to the default single-host authentication mode, enter the no dot1x host-mode command. To verify the currently

configured authentication mode, enter the show dot1x interface command.

Dell(conf-if-te-2/1)# dot1x host-mode multi-host

Dell(conf-if-te-2/1)# do show dot1x interface tengigabitethernet 2/1

802.1x information on Te 2/1:

-----------------------------

Dot1x Status: Enable

Port Control: AUTO

Port Auth Status: UNAUTHORIZED

Re-Authentication: Disable

Untagged VLAN id: None

Guest VLAN: Disable

Guest VLAN id: NONE

Auth-Fail VLAN: Disable

Auth-Fail VLAN id: NONE

Auth-Fail Max-Attempts: NONE

Critical VLAN: Disable

Critical VLAN id: NONE

Mac-Auth-Bypass: Disable

Mac-Auth-Bypass Only: Disable

Static-MAB: Disable

Static-MAB Profile: NONE

Tx Period: 30 seconds

Quiet Period: 60 seconds

ReAuth Max: 2

Supplicant Timeout: 30 seconds

Server Timeout: 30 seconds

Re-Auth Interval: 3600 seconds

Max-EAP-Req: 2

Host Mode: MULTI_HOST

Auth PAE State: Connecting

Backend State: Idle

Configuring Single-Host Authentication

To enable single-host authentication on a port, enter the dot1x host-mode single-host command in Interface mode.

Dell(conf-if-te-2/1)# dot1x host-mode single-host