Command Manual – Security 
Quidway S8500 Series Routing Switches  Chapter 1  
802.1x Configuration Commands
 
Huawei Technologies Proprietary 
1-5 
By default, 802.1x is disabled on all the ports and globally on the device. 
When the dot1x command is used in system view, if the parameter interface-list is not 
specified, 802.1x will be globally enabled. If the parameter interface-list is specified, 
802.1x will be enabled on the specified port. When this command is used in Ethernet 
port view, the parameter interface-list cannot be input and 802.1x can only be enabled 
on the current port.  
The configuration command can be used to configure the global or port 802.1x 
performance parameters before or after 802.1x is enabled. Before 802.1x is enabled 
globally, if the parameters are not configured globally or for a specified port, they will 
maintain the default values.  
After the global 802.1x performance is enabled, only when port 802.1x performance is 
enabled will the configuration of 802.1x become effective on the port.  
If 802.1x is enabled on a port, you cannot configure the maximum number of learned 
MAC addresses (by using the mac-address max-mac-count command). and vice 
versa. 
Related command: display dot1x. 
Example 
# Enable 802.1x on Ethernet 3/1/1. 
[Quidway] dot1x interface Ethernet 3/1/1 
# Enable the 802.1x globally.  
[Quidway] dot1x 
1.1.4  dot1x authentication-method 
Syntax 
dot1x authentication-method { chap | pap | eap md5-challenge } 
undo dot1x authentication-method 
View 
System view 
Parameter 
chap: Uses CHAP authentication method. 
pap: Uses PAP authentication method. 
eap: Uses EAP authentication method. By now, only MD5 encryption method is 
available.