Command Manual – Security
Quidway S8500 Series Routing Switches Chapter 1
802.1x Configuration Commands
Huawei Technologies Proprietary
1-9
Example
# Configure the interface Ethernet 3/1/1 to hold no more than 32 users.
[Quidway] dot1x max-user 32 interface Ethernet 3/1/1
1.1.8 dot1x port-control
Syntax
dot1x port-control { auto | authorized-force | unauthorized-force } [ interface
interface-list ]
undo dot1x port-control [ interface interface-list ]
View
System view, Ethernet interface view
Parameter
auto: Automatic identification mode, showing that the initial state of the interface is
unauthorized. The user is only allowed to receive or transmit EAPoL packets but not to
access the network resources. If the user passes the authentication flow, the interface
will switch over to the authorized state and then the user is allowed to access the
network resources. This is the most common case.
authorized-force: Forced authorized mode, showing that the interface to always stay
in authorized state and the user is allowed to access the network resources without
authentication/authorization.
unauthorized-force: Forced unauthorized mode, showing that the interface to always
stay in non-authorized mode, the switch does not respond to authentication requests
and the user is not allowed to access the network resources.
interface interface-list: Ethernet interface list expressed in the format interface-list
=interface-type interface-number [ to interface-type interface-number ] &<1-10>.
interface-type means the interface type, interface-number is the interface number.
Refer to command parameters in the “Port” section in the manual for the respective
meanings and value ranges of them. The interface number after the key word to should
be no smaller than the interface number before to. &<1-10> in the command means
that the preceding parameter can be entered up to 10 times.
Description
Use the dot1x port-control command to configure the mode for 802.1x to perform
access control on the specified interface.
Use the undo dot1x port-control command to restore the default access control
mode.
By default, the access control mode is auto.
To Next Page
Loading...
