Configuring 802.1X
Table 22-6 Enable 802.1x
Enter global configuration mode
dot1x method { macbased | portbased }
22.3.3 Configuring 802.1x Parameters for Port
The 802.1x proxy detection function depends on the online user handshake function. Be
sure to enable handshake before enabling proxy detection and to disable proxy detection
before disabling handshake.
Table 22-7 Configure 802.1x parameters for a port
Enter global configuration mode
Configure 802.1x parameters for a port
dot1x port-control { auto | forceauthorized |
forceunauthorized } [ interface-list ]
22.3.4 Configuring Re-authentication
In EAP-FINISH way, the port supports re-authentication. After the user is authenticated,
the port can be configured to immediately re-certification, or periodic re-certification.
Table 22-8 Configure re-authentication
Enter global configuration
mode
Immediately
re-certification
dot1x re-authenticate [interface-list]
Periodic re-authentication
enabled on a port
dot1x re-authentication [interface-list]
Periodic re-authentication
time configuration port
dot1x timeout re-authperiod time [interface-list]
22.3.5 Configuring Watch Feature
Opening function, the port without the user's circumstances, will watch regularly sends a
1x packet, triggering the following 802.1x user authentication.
Table 22-9 Configure watch feature
Enter global configuration
mode
dot1x daemon [interface-list]
Configuration time
between sending packets
Watch
dot1x daemon time time [interface-list]