D-Link DGS-3130 Emulator - Page 588

DGS-3130 Layer 3 Stackable Managed Switch CLI Reference Guide 55-2 authentication host-mode This command is used to specify the authentication mode. Use the no form of this command to revert to the default setting. authentication host-mode {multi-host | multi-auth [vlan VLAN-ID [, | -]]} no authentication host-mode [multi-auth vlan VLAN-ID [, | -]] Parameters multi-host multi-auth vlan VLAN-ID , - Specifies the port to operate in the multi-host mode. Only a single authentication is performed and all hosts connected to the port are allowed. Specifies the port to operate in multi-auth mode. Each host will be authenticated individually. (Optional) Specifies the authentication VLAN(s). This is useful when different VLANs on the Switch have different authentication requirements. Using the no command, all the VLANs are removed If not specified. This means that it does not care which VLAN the client comes from, the client will be authenticated if the client's MAC address (regardless of the VLAN) is not authenticated. After the client is authenticated, the client will not be re-authenticated when received from other VLANs. This option is useful for trunk ports to do per-VLAN authentication control. When a port's authentication mode is changed to multi-host, the previous authentication VLAN(s) on this port will be cleared. (Optional) Specifies a series of VLANs, or separate a range of interfaces from a previous range. No space is allowed before and after the comma. (Optional) Specifies a range of VLANs. No space is allowed before and after the hyphen. Default By default, multi-auth is used. Command Mode Interface Configuration Mode. Command Default Level Level: 12. Usage Guideline If the port is operated in the multi-host mode, and if one of the hosts is authenticated, then all other hosts are allowed to access the port. According to 802.1X authentication, if the re-authentication fails or the authenticated user logs off, the port will be blocked for a quiet period. The port restores the processing of EAPOL packets after the quiet period. If the port is operated in the multi-auth mode, then each host needs to be authenticated individually to access the port. A host is represented by its MAC address. Only the authorized host is allowed to access. Example This example shows how to specify the Ethernet port 1/0/1 to operate in the multi-host mode. Switch# configure terminal Switch(config)# interface ethernet 1/0/1 Switch(config-if)# authentication host-mode multi-host Switch(config-if)# 584