92
Step Command Remarks
2. Set the port
authorization
state in system
view or Ethernet
interface view.
• In system view:
dot1x port-control { authorized-force | auto |
unauthorized-force } [ interface interface-list ]
• In Ethernet interface view:
a. interface interface-type interface-number
b. dot1x port-control { authorized-force | auto
| unauthorized-force }
By default,
auto
applies.
Specifying an access control method
You can specify an access control method for one port in interface view, or for multiple ports in
system view. If different access control methods are specified for a port in system view and interface
view, the one specified later takes effect.
To specify the access control method:
Step Command Remarks
1. Enter system
view.
system-view
N/A
2. Specify an access
control method in
system view or
Ethernet interface
view.
• In system view:
dot1x port-method { macbased |
portbased } [ interface
interface-list ]
• In Ethernet interface view:
a. interface interface-type
interface-number
b. dot1x port-method { macbased
| portbased }
By default, MAC-based access
control applies.
To use both 802.1X and portal
authentication on a port, you must
specify MAC-based access control.
For information about portal
authentication, see "Configuring
portal authentication."
Setting the maximum number of concurrent
802.1X users on a port
You can set the maximum number of concurrent 802.1X users for ports individually in interface view
or in bulk in system view. If different settings are configured for a port in both views, the setting
configured later takes effect.
To set the maximum number of concurrent 802.1X users on a port:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Set the maximum number of
concurrent 802.1X users on
a port in system view or
Ethernet interface view.
• In system view:
dot1x max-user user-number
[ interface interface-list ]
• In Ethernet interface view:
a. interface interface-type
interface-number
b. dot1x max-user user-number
The default setting is
256.