Reference Guide

802.1X | 175
Related
Commands
dot1x host-mode
c e s
Enable single-host or multi-host authentication.
Syntax
dot1x host-mode {single-host | multi-host | multi-auth}
Parameters
Defaults
single-host
Command Modes
INTERFACE
Command
History
Usage
Information
• Single-host mode authenticates only one host per authenticator port, and drops all
other traffic on the port.
• Multi-host mode authenticates the first host to respond to an Identity Request,
and then permits all other traffic on the port.
• Multi-supplicant mode authenticates every device attempting to connect to the
network on through the authenticator port.
dot1x mac-auth-bypass
c s
Enable MAC authentication bypass. If 802.1X times out because the host did not
respond to the Identity Request frame, FTOS attempts to authenticate the host based
on its MAC address.
Syntax
dot1x mac-auth-bypass
Defaults
Disabled
dot1x auth-fail-vlan Configure an authentication failure VLAN.
dot1x reauthentication Enable periodic re-authentication of the client.
dot1x reauth-max Configure the maximum number of times to re-authenticate a port before
it becomes unauthorized.
single-host
Enable single-host authentication.
multi-host
Enable multi-host authentication.
multi-auth
Enable multi-supplicant authentication.
Version 8.3.19.0 Introduced on the S4820T
Version 8.3.12.0 Introduced on the S4810
Version 8.4.1.0 The multi-auth option was introduced on the C-Series and S-Series.
Version 8.3.2.0 The single-host and multi-host options were introduced on the
C-Series, E-Series, and S-Series