Configuring The Host Mode - Cisco Catalyst 3750-E Software Configuration Manual
Hide thumbs
Also See for Catalyst 3750-E:
- Getting started manual (27 pages) ,
- Product support bulletin (6 pages) ,
- Configuration handbook (359 pages)
Table of Contents
Advertisement
Configuring 802.1x Authentication
Configuring the Host Mode
Beginning in privileged EXEC mode, follow these steps to allow multiple hosts (clients) on an
IEEE 802.1x-authorized port that has the dot1x port-control interface configuration command set to
auto. Use the multi-domain keyword to configure and enable multidomain authentication (MDA),
which allows both a host and a voice device, such as an IP phone (Cisco or non-Cisco), on the same
switch port. This procedure is optional.
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
authentication host-mode [multi-auth |
multi-domain | multi-host |
single-host]
or
dot1x host-mode {multi-host |
multi-domain}
Step 4
end
Step 5
show authentication interface
interface-id
or
show dot1x interface interface-id
Step 6
copy running-config startup-config
To disable multiple hosts on the port, use the no authentication host-mode or the
no dot1x host-mode multi-host interface configuration command.
This example shows how to enable 802.1x authentication and to allow multiple hosts:
Switch(config)# interface gigabitethernet2/0/1
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x host-mode multi-host
This example shows how to enable MDA and to allow both a host and a voice device on the port:
Switch(config)# interface gigabitethernet3/0/1
Catalyst 3750-E and 3560-E Switch Software Configuration Guide
10-44
Chapter 10
Purpose
Enter global configuration mode.
Specify the port to which multiple hosts are indirectly attached, and enter
interface configuration mode.
Allow multiple hosts (clients) on an 802.1x-authorized port.
The keywords have these meanings:
multi-auth–Allow one client on the voice VLAN and multiple
•
authenticated clients on the data VLAN.
The multi-auth keyword is only available with the
Note
authentication host-mode command.
multi-host–Allow multiple hosts on an 802.1x-authorized port after
•
a single host has been authenticated.
multi-domain–Allow both a host and a voice device, such as an IP
•
phone (Cisco or non-Cisco), to be authenticated on an
IEEE 802.1x-authorized port.
You must configure the voice VLAN for the IP phone when the
Note
host mode is set to multi-domain. For more information, see
Chapter 15, "Configuring Voice VLAN."
Make sure that the dot1x port-control interface configuration command
set is set to auto for the specified interface.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Configuring IEEE 802.1x Port-Based Authentication
OL-9775-08
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
