authentication host-mode
authentication host-mode
Use the authentication host-mode interface configuration command to set the authorization manager
mode on a port.
authentication host-mode [multi-auth | multi-domain | multi-host | single-host]
no authentication host-mode [multi-auth | multi-domain | multi-host | single-host]]
Syntax Description
multi-auth
multi-domain
multi-host
single-host
Defaults
Single host mode is enabled.
Command Modes
Interface configuration
Command History
Release
12.2(53)SE2
Usage Guidelines
Single-host mode should be configured if only one data host is connected. Do not connect a voice device
to authenticate on a single-host port. Voice device authorization fails if no voice VLAN is configured on
the port.
Multi-domain mode should be configured if data host is connected through an IP Phone to the port.
Multi-domain mode should be configured if the voice device needs to be authenticated.
Multi-auth mode should be configured to allow devices behind a hub to obtain secured port access
through individual authentication. Only one voice device can be authenticated in this mode if a voice
VLAN is configured.
Multi-host mode also offers port access for multiple hosts behind a hub, but multi-host mode gives
unrestricted port access to the devices after the first user gets authenticated.
Examples
This example shows how to enable multiauth mode on a port:
Switch(config-if)# authentication host-mode multi-auth
This example shows how to enable multi-domain mode on a port:
Switch(config-if)# authentication host-mode multi-domain
This example shows how to enable multi-host mode on a port:
Switch(config-if)# authentication host-mode multi-host
Catalyst 3750-X and 3560-X Switch Command Reference
2-36
Chapter 2
Enable multiple-authorization mode (multiauth mode) on the port.
Enable multiple-domain mode on the port.
Enable multiple-host mode on the port.
Enable single-host mode on the port.
Modification
This command was introduced.
Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
OL-29704-01