107
undo dot1x
port-method
View
System view, Layer 2 Ethernet interface view
Default level
2: System level
Parameters
macbased
: Uses MAC-based access control on a port to separately authenticate each user attempting to
access the network. In this approach, when an authenticated user logs off, no other online users are
affected.
portbased
: Uses port-based access control on a port. In this approach, once an 802.1X user passes
authentication on the port, any subsequent user can access the network through the port without
authentication. When the authenticated user logs off, all other users are logged off.
interface
interface-list
: Specifies an Ethernet port list, which can contain multiple Ethernet ports. The
interface-list
argument is in the format of
interface-list
= {
interface-type
interface-number
[
to
interface-type
interface-number
] } & <1-10>, where
interface-type
represents the port type,
interface-number
represents the port number, and & <1-10> means that you can provide up to 10 ports
or port ranges for this argument. The start port number must be smaller than the end number and the two
ports must be the same type.
Description
Use the
dot1x
port-method
command to specify an access control method for the specified or all ports.
Use the
undo dot1x
port-method
command to restore the default.
By default, MAC-based access control applies.
In system view, if no
interface-list
argument is specified, the command applies to all ports.
Related commands:
display dot1x
.
Examples
# Configure port GigabitEthernet 1/0/1 to implement port-based access control.
<Sysname> system-view
[Sysname] dot1x port-method portbased interface gigabitethernet 1/0/1
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x port-method portbased
# Configure ports GigabitEthernet 1/0/2 through GigabitEthernet 1/0/5 to implement port-based
access control.
<Sysname> system-view
[Sysname] dot1x port-method portbased interface gigabitethernet 1/0/2 to gigabitethernet
1/0/5
dot1x quiet-period
Syntax
dot1x
quiet-period
