1-13
Related command: display dot1x.
Example
# Specify Ethernet1/0/1 port to operate in unauthorized-force access control mode.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x port-control unauthorized-force interface Ethernet 1/0/1
dot1x port-method
Syntax
dot1x port-method { macbased | portbased } [ interface interface-list ]
undo dot1x port-method [ interface interface-list ]
View
System view, Ethernet port view
Parameter
macbased: Performs MAC address-based authentication.
portbased: Performs port-based authentication.
interface-list: Ethernet port list, in the form of interface-list= { interface-type interface-number [ to
interface-type interface-number ] } &<1-10>, in which interface-type specifies the type of an Ethernet
port and interface-number is the number of the port. The string “&<1-10>” means that up to 10 port lists
can be provided.
Description
Use the dot1x port-method command to specify the access control method for specified Ethernet
ports.
Use the undo dot1x port-method command to revert to the default access control method.
By default, the access control method is macbased.
This command specifies the way in which the users are authenticated.
z If you specify to authenticate users by MAC addresses (that is, executing the dot1x port-method
command with the macbased keyword specified), all the users connected to the specified Ethernet
ports are authenticated separately. And if an online user logs off, others are not affected.
z If you specify to authenticate supplicant systems by port numbers (that is, executing the dot1x
port-method command with the portbased keyword specified), all the users connected to a
specified Ethernet port are able to access the network without being authenticated if a user among
them passes the authentication. And when the user logs off, the network is inaccessible to all other
supplicant systems either.
z Changing the access control method on a port by the dot1x port-method command will forcibly log
out the online 802.1x users on the port.
In system view:
z If you do not provide the interface-list argument, these two commands apply to all the ports of the
switch.
z If you specify the interface-list argument, these commands apply to the specified ports.
To Next Page
Loading...
Need help?
General