40-19
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 40 Configuring 802.1X Authentication
Configuring 802.1X Authentication on the Switch
This example shows how to enable access for multiple hosts on port 1 on module 3:
Console> (enable) set port dot1x 3/1 multiple-host enable
Port 3/1 Multiple-host option enabled.
Console> (enable)
Disabling Multiple Hosts
You can disable multiple-user access on any port where it is enabled.
To disable access for multiple hosts on a specific port, perform this task in privileged mode:
This example shows how to disable access for multiple hosts on port 1 on module 3:
Console> (enable) set port dot1x 3/1 multiple-host disable
Port 3/1 Multiple-host option disabled.
Console> (enable)
Setting the Quiet Period
When the authenticator cannot authenticate the host, it remains idle for a set period of time and then tries
again. The idle time is determined by the quiet-period value. (The default is 60 seconds.) You may set
the value from 0–65535 seconds.
To set the value for the quiet period, perform this task in privileged mode:
This example shows how to set the quiet period to 45 seconds:
Console> (enable) set dot1x quiet-period 45
dot1x quiet-period set to 45 seconds.
Console> (enable)
Setting the Shutdown Timeout Period
If a port is shut down because of a security violation, you must either manually reenable it or configure
the shutdown timeout period after which the port can be enabled again.
To set the period of time that a port will be disabled after a security violation, perform this task in
privileged mode:
Task Command
Disable multiple hosts on a specific port. set port dot1x mod/port multiple-host disable
Task Command
Set the quiet-period value. set dot1x quiet-period seconds
Task Command
Set the shutdown timeout period. set dot1x shutdown-timeout
1- 65535 seconds
To Next Page
Loading...
