Foundry NetIron M2404C and M2404F Metro Access Switches
Configuring Switch Authentication Features (Rev. 03)
802.1x Port-Based Authentication
© 2008 Foundry Networks, Inc.
Page 58 of 70
Example
device-name
(config)#
interface 1/1/1
device-name
(config-if 1/1/1)#
dot1x re-authenticate
Setting 802.1x to Multiple-Hosts Mode for a Specified Port
The
dot1x multiple-hosts
command, in Interface Configuration mode, sets 802.1x to Multiple-
Hosts mode on the specified port. The
no
form of this command sets the
default 802.1x host mode
on a specified port.
By
default, the 802.1x host mode on a specified port is Single-Host mode.
Command Syntax
device-name
(config-if
UU/SS/PP
)#
dot1x multiple-hosts
[
per-mac-mode max-
hosts
[
<number>
]]
device-name
(config-if UU/SS/PP)#
no dot1x
multiple-hosts
[
per-mac-mode
max-hosts
[
<number>
]]
Argument Description
per-mac-mode
(Optional). Sets 802.1x in Multiple-Hosts / Per-MAC-Authorization on
this port.
max-hosts
(Optional). Specifies the maximum number of hosts for this port.
number
(Optional) The maximum number of hosts allowed for this port. If no
value is specified, the command resets the number of allowed hosts to the
default value of 0. The range is <1-500>.
Example
device-name
(config)#
interface 1/1/1
device-name
(config-if 1/1/1)#
dot1x multiple-hosts per-mac-mode max-hosts
2
Setting the Traffic Mode
The
dot1x control-direction permit-in-traffic
command, in Interface Configuration mode,
enables the traffic to unknown destinations on dot1x ports and sets the dot1x traffic mode to
Unidirectional Traffic Control. The
no
form of this command sets the dot1x traffic mode to Bi-
directional Traffic Control.
By default, the Bi-directional Traffic Control is enabled.
Command Syntax
device-name
(config-if
UU/SS/PP
)#
dot1x control-direction permit-in-traffic
device-name
(config-if
UU/SS/PP
)#
no dot1x control-direction permit-in-
traffic
Displaying the 802.1x Information
Table 20
lists the available 802.1x display commands.