White Papers

has an IP address), routing through the guest VLAN is the same as any other traffic. However, the
interface may join/leave a VLAN dynamically.
Related
Commands
● dot1x auth-fail-vlan — Configures an authentication failure VLAN.
● dot1x reauthentication — Enables periodic re-authentication of the client.
● dot1x reauth-max — Configure the maximum number of times to re-authenticate a port before it
becomes unauthorized.
dot1x host-mode
Enable single-host or multi-host authentication.
Syntax
dot1x host-mode {single-host | multi-host | multi-auth}
Parameters
single-host Enable single-host authentication.
multi-host Enable multi-host authentication.
multi-auth Enable multi-supplicant authentication.
Defaults single-host
Command Modes INTERFACE
Supported Modes Full–Switch
Command
History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
● Single-host mode authenticates only one host per authenticator port and drops all other traffic on the
port.
● Multi-host mode authenticates the first host to respond to an Identity Request and then permits all
other traffic on the port.
● Multi-supplicant mode authenticates every device attempting to connect to the network on the
authenticator port.
dot1x mac-auth-bypass
Enable MAC authentication bypass. If 802.1X times out because the host did not respond to the Identity Request frame, the
system attempts to authenticate the host based on its MAC address.
Syntax
dot1x mac-auth-bypass
To disable MAC authentication bypass on a port, use the no dot1x mac-auth-bypass command.
Defaults Disabled
Command Modes INTERFACE
Supported Modes Full–Switch
Command
History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
802.1X 131