103
View
Layer 2 Ethernet Interface view
Default level
2: System level
Parameters
domain-name
: Specifies the ISP domain name, a case insensitive string of 1 to 63 characters. The
specified domain must already exist.
Description
Use the
dot1x mandatory-domain
command to specify a mandatory 802.1X authentication domain on
a port.
Use the
undo dot1x mandatory-domain
command to remove the mandatory authentication domain.
By default, no mandatory authentication domain is specified.
When authenticating an 802.1X user trying to access the port, the system selects an authentication
domain in the following order: the mandatory domain, the ISP domain specified in the username, and
the default ISP domain.
To display or cut all 802.1X connections in a mandatory domain, use the
display connection domain
isp-name
or
cut connection domain
isp-name
command. The output of the
display connection
command
without any parameters displays domain names input by users at login. For more information about the
display connection
command or the
cut connection
command, see the chapter "AAA configuration
commands."
Related commands:
display dot1x
.
Examples
# Configure the mandatory authentication domain
my-domain
for 802.1X users on GigabitEthernet
1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x mandatory-domain my-domain
# After 802.1X user
usera
passes authentication, execute the
display connection
command to display the
user connection information on GigabitEthernet 1/0/1. For more information about the
display
connection
command, see the chapter "AAA configuration commands."
[Sysname-GigabitEthernet1/0/1] display connection interface gigabitethernet 1/0/1
Index=68 ,Username=usera@my-domian
MAC=0015-e9a6-7cfe
IP=3.3.3.3
IPv6=N/A
Total 1 connection(s) matched.
dot1x max-user
Syntax
In system view:
dot1x
max-user
user-number
[
interface
interface-list
]
