106
Parameters
authorized-force
: Places the specified or all ports in the authorized state, enabling users on the ports to
access the network without authentication.
auto
: Places the specified or all ports initially in the unauthorized state to allow only EAPOL packets to
pass, and after a user passes authentication, sets the port in the authorized state to allow access to the
network. You can use this option in most scenarios.
unauthorized-force
: Places the specified or all ports in the unauthorized state, denying any access
requests from users on the ports.
interface
interface-list
: Specifies an Ethernet port list, which can contain multiple Ethernet ports. The
interface-list
argument is in the format of
interface-list
= {
interface-type
interface-number
[
to
interface-type
interface-number
] } & <1-10>, where
interface-type
represents the port type,
interface-number
represents the port number, and & <1-10> means that you can provide up to 10 ports
or port ranges. The start port number must be smaller than the end number and the two ports must be of
the same type.
Description
Use the
dot1x
port-control
command to set the authorization state for the specified or all ports.
Use the
undo dot1x
port-control
command to restore the default.
The default port authorization state is
auto
.
In system view, if no
interface-list
argument is specified, the command applies to all ports.
Related commands:
display dot1x
.
Examples
# Set the authorization state of port GigabitEthernet 1/0/1 to
unauthorized-force
.
<Sysname> system-view
[Sysname] dot1x port-control unauthorized-force interface gigabitethernet 1/0/1
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x port-control unauthorized-force
# Set the authorization state of ports GiagbitEthernet 1/0/2 through GigabitEthernet 1/0/5 to
unauthorized-force
.
<Sysname> system-view
[Sysname] dot1x port-control unauthorized-force interface gibabitethernet 1/0/2 to
gigabitethernet 1/0/5
dot1x port-method
Syntax
In system view:
dot1x
port-method
{
macbased
|
portbased
}
[
interface
interface-list
]
undo dot1x
port-method
[
interface
interface-list
]
In Layer 2 Ethernet interface view:
dot1x
port-method
{
macbased
|
portbased
}
