Users Guide
Congure a port to be placed in the VLAN after failing the authentication process as specied number of times using the dot1x auth-
fail-vlan command from INTERFACE mode. Congure the maximum number of authentication attempts by the authenticator using
the keyword
max-attempts with this command.
Example of Conguring Maximum Authentication Attempts
Dell(conf-if-Te-1/1/1/1)#dot1x guest-vlan 200
Dell(conf-if-Te-1/1/1/1)#show config
!
interface TenGigabitEthernet 1/1/1/1
switchport
dot1x authentication
dot1x guest-vlan 200
no shutdown
Dell(conf-if-Te-1/1/1/1)#
Dell(conf-if-Te-1/1/1/1)#dot1x auth-fail-vlan 100 max-attempts 5
Dell(conf-if-Te-1/1/1/1)#show config
!
interface TenGigabitEthernet 1/1/1/1
switchport
dot1x authentication
dot1x guest-vlan 200
dot1x auth-fail-vlan 100 max-attempts 5
no shutdown
Dell(conf-if-Te-1/1/1/1)#
Example of Viewing Congured Authentication
View your conguration using the show config command from INTERFACE mode, as shown in the example in Conguring a Guest
VLAN
or using the show dot1x interface command from EXEC Privilege mode.
802.1x information on Te 1/1/1/1:
-----------------------------
Dot1x Status: Enable
Port Control: FORCE_AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Guest VLAN: Disabled
Guest VLAN id: 200
Auth-Fail VLAN: Disabled
Auth-Fail VLAN id: 100
Auth-Fail Max-Attempts: 5
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 10
Supplicant Timeout: 15 seconds
Server Timeout: 15 seconds
Re-Auth Interval: 7200 seconds
Max-EAP-Req: 10
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
Conguring Timeouts
If the supplicant or the authentication server is unresponsive, the authenticator terminates the authentication process after 30 seconds by
default. You can congure the amount of time the authenticator waits for a response.
To terminate the authentication process, use the following commands:
• Terminate the authentication process due to an unresponsive supplicant.
INTERFACE mode
94
802.1X