Configuration Guide 802.1X Commands
This function is disabled by default.
Interface configuration mode
Use the show dot1x command to display the 802.1X configuration.
The following example configures the 802.1X authentication on the port.
Ruijie(config-if-GigabitEthernet 0/0)# dot1x port-control auto
Displays the 802.1X information.
4.35 dot1x port-control-mode
By default, 802.1x adopts MAC address-based control mode. In this mode, only authenticated users
have access to the network, while other users that connect to the same port cannot access the
network. In the port-based control mode, however, if one user that connects to the port passes the
authentication, this port becomes an authenticated port and all the users that connect to this port
have access to the network. In the port-based single-user control mode, the port is authenticated
when it allows only one authenticated user who is enabled to use the network normally. If you find
other users on the port, you should clear all the users on the port and re-authenticate. The
authentication mode can be configured using the following commands
dot1x port-control-mode { mac-based | port-based | port-based single-host}
no dot1x port-control-mode
Enable the MAC address-based control.
Enable port-based control.
Enable single host-based control.
MAC address-based access control is used by default.
Interface configuration mode.
Use the show dot1x port-control command to show the 802.1X configuration for the port.
Single-host is port-based single-user 802.1x access control. Use show dot1x port-control to display
port-based and use show running-config to display dot1x port-control-mode port-based single-host.