Cisco IE-3000-8TC Command Reference - Page 104

dot1x auth-fail max-attempts Chapter 2 IE 3000 Switch Cisco IOS Commands dot1x auth-fail max-attempts Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum allowable authentication attempts before a port is moved to the restricted VLAN. To return to the default setting, use the no form of this command. dot1x auth-fail max-attempts max-attempts no dot1x auth-fail max-attempts Syntax Description max-attempts Specify a maximum number of authentication attempts allowed before a port is moved to the restricted VLAN. The range is 1 to 3, the default value is 3. Defaults The default value is 3 attempts. Command Modes Interface configuration Command History Release 12.2(44)EX Modification This command was introduced. Usage Guidelines If you reconfigure the maximum number of authentication attempts allowed by the VLAN, the change takes effect after the re-authentication timer expires. Examples This example shows how to set 2 as the maximum number of authentication attempts allowed before the port is moved to the restricted VLAN on port 3: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# interface gigabitethernet1/3 Switch(config-if)# dot1x auth-fail max-attempts 2 Switch(config-if)# end Switch(config)# end Switch# You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC command. Related Commands Command dot1x auth-fail vlan [vlan id] Description Enables the optional restricted VLAN feature. 2-78 Cisco IE 3000 Switch Command Reference OL-13019-01