SMC Networks 8124PL2, Management Manual

Page: 315 / 491

Command Line Interface
4-82
4
- auto – Requires a dot1x-aware connected client to be authorized by the
RADIUS server. Clients that are not dot1x-aware will be denied access.
- force-authorized – Configures the port to grant access to all clients, either
dot1x-aware or otherwise.
- force-unauthorized – Configures the port to deny access to all clients,
either dot1x-aware or otherwise.
Default
force-authorized
Command Mode
Interface Configuration
Example
dot1x operation-mode
This command allows single or multiple hosts (clients) to connect to an
802.1X-authorized port. Use the
no form with no keywords to restore the default to
single host. Use the no form with the multi-host max-count keywords to restore the
default maximum count.
Syntax
dot1x operation-mode { single-host | multi-host [ max-count count ]}
no dot1x operation-mode [ multi-host max-count ]
- single-host – Allows only a single host to connect to this port.
- multi-host – Allows multiple host to connect to this port.
- max-count – Keyword for the maximum number of hosts.
- count – The maximum number of hosts that can connect to a port.
(Range: 1-1024; Default: 5)
Default
Single-host
Command Mode
Interface Configuration
Command Usage
• The “max-count” parameter specified by this command is only effective if the
dot1x mode is set to “auto” by the dot1x port-control command (page 4-105).
• In “multi-host” mode, only one host connected to a port needs to pass
authentication for all other hosts to be granted network access. Similarly, a
port can become unauthorized for all hosts if one attached host fails
re-authentication or sends an EAPOL logoff message.
Console(config)#interface eth 1/2
Console(config-if)#dot1x port-control auto
Console(config-if)#