506 802.1x Commandsdot1x multiple-hostsThe dot1x multiple-hosts Interface Configuration mode command allows multiple hosts (clients) on an802.1X-authorized port with the dot1x port-control Interface Configuration mode command set to auto.Use the no form of this command to return to the default setting.Syntax• dot1x multiple-hosts• no dot1x multiple-hostsThis command has no arguments or keywords.Default ConfigurationMultiple hosts are disabled. If a port would join a port-channel, the state would be multiple hosts aslong as the port is member in the port-channel.Multiple-hosts must be enabled if the user disables ingress-filtering on this port.Command ModeInterface Configuration (Ethernet) mode.User Guidelines• This command enables the attachment of multiple clients to a single 802.1X-enabled port. In thismode, only one of the attached hosts must be successfully authorized for all hosts to be grantednetwork access. If the port becomes unauthorized, all attached clients are denied access to thenetwork.• For unauthenticated VLANs multiple hosts are always enabled.ExamplesThe following command allows multiple hosts (clients) on an 802.1X-authorized port.dot1x single-host-violationThe dot1x single-host-violation Interface Configuration mode command configures the action to betaken when a station of which the MAC address is not the supplicant MAC address, attempts to access theinterface. Use the no form of this command to return to default.console config-if(Config-VLAN)#dot1x multiple-hosts5400_CLI.book Page 506 Wednesday, December 17, 2008 4:33 PM
