73
You can set authorization state for one port in interface view, or for multiple ports in system view. If
different authorization state is set for a port in system view and interface view, the one set later takes
effect.
Follow these steps to set the authorization state of a port:
To do… Use the command… Remarks
Enter system view
system-view
—
Set the port
authorization
state
In system view
dot1x port-control { authorized-force |
auto | unauthorized-force } [ interface
interface-list ]
Optional
Use either approach.
By default, auto applies.
In Layer 2
Ethernet
interface view
interface interface-type interface-number
dot1x port-control { authorized-force |
auto | unauthorized-force }
Specifying an access control method
You can specify an access control method for one port in interface view or for multiple ports in system
view. If different access control methods are specified for a port in system view and interface view, the
one specified later takes effect.
Follow these steps to specify the access control method:
To do… Use the command… Remarks
Enter system view system-view —
Specify an
access control
method
In system view
dot1x port-method { macbased |
portbased } [ interface interface-list ]
Optional
Use either approach.
By default, MAC-based access
control applies.
In Layer 2
Ethernet
interface view
interface interface-type
interface-number
dot1x port-method { macbased |
portbased }
NOTE:
To use both 802.1X and portal authentication on a port, you must specify MAC-based access control. For
more information about portal authentication, see the chapter "Portal configuration."
Setting the maximum number of concurrent 802.1X users on a
port
You can set the maximum number of concurrent 802.1X users for ports individually in interface view or in
bulk in system view. If different settings are configured for a port in both views, the setting configured later
takes effect.
Follow these steps to set the maximum number of concurrent 802.1X users on a port:
To do… Use the command… Remarks
Enter system view system-view —