Dell S6000 FTOS 9.0(2.0) Command Line Reference Guide for the System - Page 97

Defaults Command Modes Command History Disabled EXEC Privilege Version 9.0.2.0 Version 8.3.12.0 Version 8.4.1.0 Introduced on S6000 Introduced on the S4810. Introduced on S-Series dot1x auth-fail-vlan s S6000 Configure an authentication failure VLAN for users and devices that fail 802.1X authentication. Syntax Parameters Defaults Command Modes Command History Usage Information Related Commands dot1x auth-fail-vlan vlan-id [max-attempts number] To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [max-attempts number] command. vlan-id max-attempts number Enter the VLAN Identifier. Range: 1 to 4094 (OPTIONAL) Enter the keyword max-attempts followed number of attempts desired before authentication fails. Range: 1 to 5 Default: 3 3 attempts CONFIGURATION (conf-if-interface-slot/port) Version 9.0.2.0 Version 8.3.12.0 Version 8.4.1.0 Introduced on S6000 Introduced on the S4810. Introduced on S-Series If the host responds to 802.1X with an incorrect login/password, the login fails. The switch will attempt to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface is moved to the authentication failed VLAN. Once the authentication VLAN is assigned, the port-state must be toggled to restart authentication. Authentication will occur at the next re-authentication interval (dot1x reauthentication). dot1x port-control Enable port control on an interface. 802.1X | 97