Users Guide

If the host fails authentication for the designated number of times, the authenticator places the port in
authentication failed VLAN (dot1x auth-fail-vlan).
NOTE: You can create the Layer 3 portion of a guest VLAN and authentication fail VLANs regardless
if the VLAN is assigned to an interface or not. After an interface is assigned a guest VLAN (which
has an IP address), routing through the guest VLAN is the same as any other traffic. However, the
interface may join/leave a VLAN dynamically.
Related
Commands
● dot1x auth-fail-vlan — Configure an authentication failure VLAN.
● dot1x reauthentication — Enable periodic re-authentication of the client.
● dot1x reauth-max —
Configure the maximum number of times to re-authenticate a port before it becomes unauthorized
dot1x host-mode
Enable single-host or multi-host authentication.
Syntax
dot1x host-mode {single-host | multi-host | multi-auth}
Parameters
single-host Enable single-host authentication.
multi-host Enable multi-host authentication.
multi-auth Enable multi-supplicant authentication.
Defaults single-host
Command Modes INTERFACE
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
Networking OS Command Line Reference Guide.
Version Description
9.8(2.0) Introduced on the S3100 series.
9.8(1.0) Introduced on the Z9100–ON.
9.8(0.0P5) Introduced on the S4048-ON.
9.8(0.0P2) Introduced on the S3048-ON.
9.7(0.0) Introduced on the S6000–ON.
9.2(1.0) Introduced on the Z9500.
9.0.2.0 Introduced on the S6000.
9.0.0.0 Introduced on the Z9000.
8.3.19.0 Introduced on the S4820T.
8.3.12.0 Introduced on the S4810.
8.3.11.1 Introduced on the Z9000.
8.4.1.0 Added the multi-auth option on the C-Series and S-Series.
8.3.2.0 Added the single-host and multi-host options on the C-Series, E-Series,
and S-Series.
Usage
Information
● Single-host mode authenticates only one host per authenticator port and drops all other traffic on the
port.
● Multi-host mode authenticates the first host to respond to an Identity Request and then permits all
other traffic on the port.
● Multi-supplicant mode authenticates every device attempting to connect to the network on the
authenticator port.
168 802.1X