2-53
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
authentication violation
authentication violation
Use the authentication violation interface configuration command to configure the violation modes that
occur when a new device connects to a port or when a new device connects to a port after the maximum
number of devices are connected to that port.
authentication violation {protect | replace | restrict | shutdown}
no authentication violation {protect | replace | restrict | shutdown}
Syntax Description
Defaults By default authentication violation shutdown mode is enabled.
Command Modes Interface configuration
Command History
Examples This example shows how to configure an IEEE 802.1x-enabled port as error disabled and to shut down
when a new device connects it:
Switch(config-if)# authentication violation shutdown
This example shows how to configure an 802.1x-enabled port to generate a system error message and to
change the port to restricted mode when a new device connects to it:
Switch(config-if)# authentication violation restrict
This example shows how to configure an 802.1x-enabled port to ignore a new device when it connects
to the port:
Switch(config-if)# authentication violation protect
This example shows how to configure an 802.1x-enabled port to remove the current session and initiate
authentication with a new device when it connects to the port:
Switch(config-if)# authentication violation replace
You can verify your settings by entering the show authentication privileged EXEC command.
protect Unexpected incoming MAC addresses are dropped. No syslog errors are
generated.
replace Removes the current session and initiates authentication with the new host.
restrict Generates a syslog error when a violation error occurs.
shutdown Error disables the port or the virtual port on which an unexpected MAC
address occurs.
Release Modification
12.2(53)SE2 This command was introduced.
12.2(55)SE The replace keyword was added.