Command Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-9
1.1.8 dot1x port-method
Syntax
dot1x port-method { macbased | portbased } [ interface interface-list ]
undo dot1x port-method [ interface interface-list ]
View
System view/Ethernet Port view
Parameter
macbased: Configures the 802.1x authentication system to perform authentication on
the supplicant based on MAC address.
portbased: Configures the 802.1x authentication system to perform authentication on
the supplicant based on interface number.
interface interface-list: Ethernet interface list including several Ethernet interfaces,
expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the
interface type, interface-num specifies the interface number and interface-name
specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
Description
Using dot1x port-method command, you can configure the base for 802.1x to perform
access control on the specified interface. Using undo dot1x port-method command,
you can restore the default access control base.
By default, the value is macbased.
This command is used to set the base for 802.1x to perform access control, namely
authenticate the users, on the specified interface. When macbased is adopted, the
user access this interface must be authenticated independently, and if one successful
authentication user is to finish network service, the other accessed users can still use
network service. When portbased is adopted, if only the first access user by this
interface can be authenticated successfully, the other access users followed can be
considered authenticated successfully automatically ,but if the first one finish the
network service , the other accessed users’ network service will be rejected . .
This command has effect on the interface specified by the parameter interface-list
when executed in system view. It has effect on all the interfaces when no interface is
specified. The parameter interface-list cannot be input when the command is executed
in Ethernet Port view and it has effect only on the current interface.
For the related commands, see display dot1x.
To Next Page
Loading...
Need help?
General
