Command Manual (For Soliton) – 802.1x-System Guard
H3C S3100 Series Ethernet Switches
Chapter 1 802.1x Configuration Commands
1-13
EAPoL packets can be exchanged between the switch and the hosts. And the hosts
connected to the port are authorized to access the network resources after the hosts
pass the authentication. Normally, a port operates in this mode.
authorized-force
: Specifies to operate in
authorized-force
access control mode.
When a port operates in this mode, all the hosts connected to it can access the network
resources without being authenticated.
unauthorized-force
: Specifies to operate in
unauthorized-force
access control mode.
When a port operates in this mode, the hosts connected to it cannot access the network
resources.
interface-list
: Ethernet port list, in the form of
interface-list=
{
interface-type
interface-number
[
to
interface-type interface-number
] } &<1-10>, in which
interface-type
specifies the type of an Ethernet port and
interface-number
is the
number of the port. The string “&<1-10>” means that up to 10 port lists
can be provided.
Description
Use the
dot1x
port-control
command to specify the access control mode for specified
Ethernet ports.
Use the
undo dot1x
port-control
command to revert to the default access control
mode.
The default access control mode is
auto
.
Use the
dot1x
port-control
command to configure the access control mode for
specified 802.1x-enabled ports.
In system view:
z
If you do not provide the
interface-list
argument, these two commands apply to all
the ports of the switch.
z
If you specify the
interface-list
argument, these commands apply to the specified
ports.
In Ethernet port view, the
interface-list
argument is not available and the commands
apply to only the current Ethernet port.
Related command:
display dot1x
.
Example
# Specify Ethernet1/0/1 port to operate in
unauthorized-force
access control mode.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x port-control unauthorized-force interface Ethernet 1/0/1
