Cisco Catalyst 250 Series User Manual

PurposeCommand or Action
Specifies an active VLAN as an 802.1x restricted VLAN.
The range is 1 to 4094.
authentication event fail action authorize vlan vlan-id
Example:
Switch(config-if)# authentication event fail
Step 5
You can configure any active VLAN except an internal
VLAN (routed port), an RSPAN VLAN or a voice VLAN
as an 802.1x restricted VLAN.
action authorize vlan 2
Returns to privileged EXEC mode.end
Example:
Switch(config-if)# end
Step 6
Configuring Number of Authentication Attempts on a Restricted VLAN
You can configure the maximum number of authentication attempts allowed before a user is assigned to the
restricted VLAN by using the authentication event retry retry count interface configuration command. The
range of allowable authentication attempts is 1 to 3. The default is 3 attempts.
Beginning in privileged EXEC mode, follow these steps to configure the maximum number of allowed
authentication attempts. This procedure is optional.
SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3.
Use one of the following:
•
switchport mode access
•
switchport mode private-vlan host
4.
authentication port-control auto
5.
authentication event fail action authorize vlan vlan-id
6.
authentication event retry retry count
7.
end
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
326 OL-29048-01
Configuring IEEE 802.1x Port-Based Authentication
Configuring a Restricted VLAN

Cisco Catalyst 250 Series Specifications

General

Brand	Cisco
Model	Catalyst 250 Series
Category	Switch
Language	English