Configuring Authentication
Manually Reauthenticating the Supplicant
You can manually reauthenticate the supplicant connected to a specific port at any time. When you want
to configure automatic 802.1x supplicant reauthentication, see the
Reauthentication of the Supplicant" section on page
To manually reauthenticate a supplicant connected to a specific port, perform this task in privileged
mode:
Task
Manually authenticate the supplicant connected to
a specific port.
This example shows how to manually reauthenticate the supplicant connected to port 1 on module 4:
Console> (enable) set port dot1x 4/1 re-authenticate
Port 4/1 re-authenticating...
dot1x re-authentication successful...
dot1x port 4/1 authorized.
Enabling Multiple Hosts
You can enable a specific port to allow multiple-user access. When a port is enabled for multiple users,
and a supplicant connected to that port is authorized successfully, any host (with any MAC address) is
allowed to send and receive traffic on that port. If you then connect multiple supplicants to that port
through a hub, you can reduce the security level on that port.
To enable multiple-user access on a specific port, perform this task in privileged mode:
Task
Enable multiple hosts on a specific port.
This example shows how to enable access for multiple hosts on port 1 on module 4:
Console> (enable) set port dot1x 4/1 multiple-host enable
Port 4/1 multiple hosts allowed.
Disabling Multiple Hosts
You can disable multiple-user access on any port where it is enabled.
To disable multiple-user access on a specific port, perform this task in privileged mode:
Task
Disable multiple hosts on a specific port.
This example shows how to disable access for multiple hosts on port 1 on module 4:
Console> (enable) set port dot1x 4/1 multiple-host disable
Port 4/1 multiple hosts not allowed.
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
27-42
Chapter 27
Configuring Switch Access Using AAA
"Setting and Enabling Automatic
27-41.
Command
set port dot1x mod/port re-authenticate
Command
set port dot1x mod/port multiple-host enable
Command
set port dot1x mod/port multiple-host disable
78-12647-02