Cisco WS-C3560E-48PD-SF Command Reference - Page 114

dot1x auth-fail max-attempts Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail max-attempts Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum allowable authentication attempts before a port is moved to the restricted VLAN. To return to the default setting, use the no form of this command. dot1x auth-fail max-attempts max-attempts no dot1x auth-fail max-attempts Syntax Description max-attempts Specify a maximum number of authentication attempts allowed before a port is moved to the restricted VLAN. The range is 1 to 3, the default value is 3. Defaults The default value is 3 attempts. Command Modes Interface configuration Command History Release 12.2(25)SED Modification This command was introduced. Usage Guidelines If you reconfigure the maximum number of authentication attempts allowed by the VLAN, the change takes effect after the re-authentication timer expires. Examples This example shows how to set 2 as the maximum number of authentication attempts allowed before the port is moved to the restricted VLAN on port 3: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# interface gigabitethernet0/3 Switch(config-if)# dot1x auth-fail max-attempts 2 Switch(config-if)# end Switch(config)# end Switch# You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC command. 2-82 Catalyst 3560 Switch Command Reference 78-16405-05