Configure a port to be placed in the VLAN after failing the authentication process as specified number of times using the dot1x auth-fail-vlan command from INTERFACE mode. Configure the maximum number of authentication attempts by the authenticator usingthe keyword max-attempts with this command.Example of Configuring Maximum Authentication AttemptsDell(conf-if-Te-2/1)#dot1x guest-vlan 200Dell(conf-if-Te 2/1)#show config!interface TenGigabitEthernet 2/1switchportdot1x authenticationdot1x guest-vlan 200no shutdownDell(conf-if-Te-2/1)#Dell(conf-if-Te-2/1)#dot1x auth-fail-vlan 100 max-attempts 5Dell(conf-if-Te-2/1)#show config!interface TenGigabitEthernet 2/1switchportdot1x authenticationdot1x guest-vlan 200dot1x auth-fail-vlan 100 max-attempts 5no shutdownDell(conf-if-Te-2/1)#Example of Viewing Configured AuthenticationView your configuration using the show config command from INTERFACE mode, as shown in the example in Configuring a GuestVLAN or using the show dot1x interface command from EXEC Privilege mode.802.1x information on Te 2/1:-----------------------------Dot1x Status: EnablePort Control: FORCE_AUTHORIZEDPort Auth Status: UNAUTHORIZEDRe-Authentication: DisableUntagged VLAN id: NoneGuest VLAN: DisabledGuest VLAN id: 200Auth-Fail VLAN: DisabledAuth-Fail VLAN id: 100Auth-Fail Max-Attempts: 5Tx Period: 90 secondsQuiet Period: 120 secondsReAuth Max: 10Supplicant Timeout: 15 secondsServer Timeout: 15 secondsRe-Auth Interval: 7200 secondsMax-EAP-Req: 10Auth Type: SINGLE_HOSTAuth PAE State: InitializeBackend State: Initialize102 802.1X
