Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

dot1x auth-fail max-attemptsChapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsdot1x auth-fail max-attemptsUse the dot1x auth-fail max-attempts interface configuration command on the switch stack or on astandalone switch to configure the maximum allowable authentication attempts before a port is movedto the restricted VLAN. To return to the default setting, use the no form of this command.dot1x auth-fail max-attempts max-attemptsno dot1x auth-fail max-attemptsSyntax Descriptionmax-attemptsSpecify a maximum number of authentication attempts allowed before a portis moved to the restricted VLAN. The range is 1 to 3, the default value is 3.DefaultsThe default value is 3 attempts.Command ModesInterface configurationCommand HistoryRelease12.2(35)SE2ModificationThis command was introduced.Usage GuidelinesIf you reconfigure the maximum number of authentication attempts allowed by the VLAN, the changetakes effect after the re-authentication timer expires.ExamplesThis example shows how to set 2 as the maximum number of authentication attempts allowed before theport is moved to the restricted VLAN on port 3:Switch# configure terminalEnter configuration commands, one per line. End with CNTL/Z.Switch(config)# interface gigabitethernet1/0/3Switch(config-if)# dot1x auth-fail max-attempts 2Switch(config-if)# endSwitch(config)# endSwitch#You can verify your settings by entering the show dot1x [interface interface-id] privileged EXECcommand.2-148Catalyst 3750-E and 3560-E Switch Command ReferenceOL-9776-08