This example shows how to configure an 802.1x-enabled port to ignore a new device when it connects to the
port:
Device(config-if)# authentication violation protect
This example shows how to configure an 802.1x-enabled port to remove the current session and initiate
authentication with a new device when it connects to the port:
Device(config-if)# authentication violation replace
You can verify your settings by entering the show authentication privileged EXEC command.
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
722
authentication violation