Command Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches
Chapter 2 EAD Fast Deployment
Configuration Commands
2-1
Chapter 2 EAD Fast Deployment Configuration
Commands
2.1 EAD Fast Deployment Configuration Commands
2.1.1 dot1x free-ip
Syntax
dot1x free-ip ip-address { mask-address | mask-length }
undo dot1x free-ip { ip-address { mask | mask-length } | all }
View
System view
Parameters
ip-address: IP address of the freely accessible network segment, also called a free IP.
mask: Mask of the freely accessible network segment.
mask-length: Length of the mask of the freely accessible network segment.
Description
Use the dot1x free-ip command to configure a freely accessible network segment, that
is, a network segment that users can access before passing 802.1x authentication.
Use the undo dot1x free-ip command to remove one or all freely accessible network
segments.
By default, no freely accessible network segment is configured.
Note that:
z The free IP function is mutually exclusive with the global MAC authentication
function and the port security function.
z The free IP function is effective only when the port access control mode is auto.
z The maximum number of freely accessible network segments varies by device.
Related commands: display dot1x.
Examples
# Configure 192.168.0.0 as a freely accessible network segment.
<Sysname> system-view
[Sysname] dot1x free-ip 192.168.0.0 24
To Next Page
Loading...
Need help?
General
