Command Reference AAA Commands
AAA Commands
aaa authentication dot1x
Use this command to enable AAA authentication 802.1x and configure an 802.1x user authentication
method list in global configuration mode.
Use the no form of this command to delete the 802.1x user authentication method list.
aaa authentication dot1x { default | list-name } method1 [ method2...]
no aaa authentication dot1x { default | list-name }
Parameter Description Parameter
Description
default
When this parameter is used, the following defined 802.1x user authentication
method list is used as the default method of user authentication.
list-name
Specifies the name of an 802.1x user authentication method list, which can be
any character string.
method
It must be one of the keywords: local, none, and group. One method list can
contain up to four methods.
local
Uses the local user name database for authentication.
none
Authentication is not performed.
group
Uses a server group for authentication. Currently, the RADIUS server group is
supported.
Defaults
N/A
Command
Mode
Global configuration mode
Usage Guide
If the AAA 802.1x security service is enabled on equipment, AAA is required for 802.1x user
authentication negotiation. Use the
aaa authentication dot1x command to configure a default or
an optional method list of 802.1x user authentication.
The next method can be used for authentication only when the current method does not respond.
Configuration
Examples
The following example defines an AAA
802.1x user authentication method list named rds_d1x. In
the authentication method list, the RADIUS security server is used for authentication first. If the
RADIUS security server does not respond within the specified period of time, the local user database
is used for authentication..
Ruijie(config)# aaa authentication dot1x rds_d1x group radius local
Command Description
aaa new-model
Enables the AAA security service.
Related
Commands
dot1x authentication
Associates a specific method list with the 802.1x user.