Administrator Guide

If the host fails authentication for the designated number of times, the authenticator places the port in
authentication failed VLAN (dot1x auth-fail-vlan).
NOTE: You can create the Layer 3 portion of a guest VLAN and authentication fail VLANs regardless
if the VLAN is assigned to an interface or not. After an interface is assigned a guest VLAN (which has
an IP address), routing through the guest VLAN is the same as any other traffic. However, the
interface may join/leave a VLAN dynamically.
Use this command in Configuration Terminal Batch mode to configure a guest VLAN in a dual-homing
setup.
Related
Commands
● dot1x auth-fail-vlan
● dot1x reauthentication
● dot1x reauth-max
● show dot1x interface
dot1x host-mode
Enable single-host or multi-host authentication.
C9000 Series
Syntax
dot1x host-mode {single-host | multi-host | multi-auth}
Parameters
single-host Enable single-host authentication.
multi-host Enable multi-host authentication.
multi-auth Enable multi-supplicant authentication.
Defaults single-host
Command Modes
INTERFACE
INTERFACE (BATCH MODE)
Command
History
This guide is platform-specific. For command information about other platforms, refer to the relevant Dell
Networking OS Command Line Reference Guide.
The following is a list of the Dell Networking OS version history for this command.
Version Description
9.10(0.0) Introduced the Configuration Terminal Batch mode on C9010.
9.9(0.0) Introduced on the C9010.
9.2(1.0) Introduced on the Z9500.
8.3.19.0 Introduced on the S4820T.
8.3.12.0 Introduced on the S4810.
8.3.11.1 Introduced on the Z9000.
8.4.1.0 Added the multi-auth option on the C-Series and S-Series.
8.3.2.0 Added the single-host and multi-host options on the C-Series, E-Series,
and S-Series.
Usage
Information
● Single-host mode authenticates only one host per authenticator port and drops all other traffic on the
port.
● Multi-host mode authenticates the first host to respond to an Identity Request and then permits all
other traffic on the port.
202 802.1X