802.1X | 125Multi-Supplicant AuthenticationMulti-Supplicant Authentication is available on platforms: c sThe 802.1X Multi-supplicant Authentication enables multiple devices on a single authenticator port toaccess the network by authenticating each device. In addition, Multi-supplicant Authentication usesdynamic MAC-based VLAN assignment to place devices on different VLANs. This feature is differentfrom Multi-host Authentication in which multiple devices connected to a single authenticator port canaccess the network after only the one device is authenticated, and all hosts are placed in the same VLAN asthe authenticated device.Multi-supplicant authentication is needed, for example, in the case of a workstation at which a VOIP phoneand PC are connected to a single authenticator port. Multi-host authentication could authenticate the firstdevice to respond, and then both devices could access the network. However, if you wanted to place themin different VLANs—a VOIP VLAN and a data VLAN— you would need to authenticate the devicesseparately so that the RADIUS server can send each device’s VLAN assignment during that devicesauthentication process.Task Command Syntax Command ModeConfigure Single-host Authentication mode on a port. dot1x host-mode single-host INTERFACEFTOS(conf-if-gi-2/1)#dot1x port-control force-authorizedFTOS(conf-if-gi-2/1)#do show dot1x interface gigabitethernet 2/1802.1x information on Gi 2/1:-----------------------------Dot1x Status: EnablePort Control: FORCE_AUTHORIZEDPort Auth Status: UNAUTHORIZEDRe-Authentication: DisableUntagged VLAN id: NoneGuest VLAN: EnableGuest VLAN id: 200Auth-Fail VLAN: EnableAuth-Fail VLAN id: 100Auth-Fail Max-Attempts: 5Tx Period: 90 secondsQuiet Period: 120 secondsReAuth Max: 10Supplicant Timeout: 15 secondsServer Timeout: 15 secondsRe-Auth Interval: 7200 secondsMax-EAP-Req: 10Host Mode: SINGLE_HOSTAuth PAE State: InitializeBackend State: Initialize
