Cisco Cisco Gigabit Ethernet Switch Module (CGESM) for HP Technical References

Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum 
number of authentication attempts allowed before a port is moved to the restricted VLAN. To return to 
the default setting, use the no form of this command.

dot1x auth-fail max-attempts max-attempts

no dot1x auth-fail max-attempts 

The default value is 3 attempts. 

Interface configuration

If you reconfigure the maximum number of authentication failures allowed by the VLAN, the change 
takes effect after the re-authentication timer expires.

This example shows how to set 2 as the maximum number of authentication attempts allowed before the 
port is moved to the restricted VLAN on port 3:

Switch# configure terminal 

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)# interface gigabitethernet0/3

Switch(config-if)# dot1x auth-fail max-attempts 2

Switch(config-if)# end

Switch(config)# end

Switch#

You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC 
command.

Specify a maximum number of authentication attempts allowed before a port 
is moved to the restricted VLAN. The range is 1 to 3, the default value is 3.

12.2(25)SED

This command was introduced.