3Com 4500 26-PORT Switch User Manual


 
802.1x Configuration Commands 241
authorized-force: Forced authorized mode, configuring the interface to always
stay in authorized state and the user is allowed to access the network resources
without authentication/authorization.
unauthorized-force: Forced unauthorized mode, configuring the interface to
always stay in non-authorized mode and the user is not allowed to access the
network resources.
interface interface-list: Ethernet interface list including several Ethernet
interfaces, expressed in the format
interface-list = { interface-num [ to
interface-num ] } & < 1-10 >
. interface-num specifies a single Ethernet
interface in the format
interface-num = { interface-type interface-num |
interface-name }
, where interface-type specifies the interface type,
interface-num specifies the interface number and interface-name specifies the
interface name. For the respective meanings and value ranges, see the parameters
of the Port Command chapter.
Description
Use the dot1x port-control command to configure the mode for 802.1x to
perform access control on the specified interface. Use the
undo dot1x port-control command to restore the default access control mode.
By default, the value is auto.
This command is used to set the mode, or the interface state, for 802.1x to
perform access control on the specified interface. This command has an effect on
the interface specified by the parameter
interface-list when executed in
System View. It has an effect on all the interfaces when no interface is specified.
The parameter
interface-list cannot be entered when the command is
executed in Ethernet Port View and it has an effect only on the current interface.
Related command: display dot1x.
Example
To configure the interface Ethernet 1/0/2 to be in force-unauthorized state, enter
the following:
<4500>system-view
System View: return to User View with Ctrl-Z
[4500]dot1x port-control force-unauthorized interface ethernet 1/0/2
dot1x port-method Syntax
dot1x port-method { macbased | portbased } [ interface
interface-list ]
undo dot1x port-method [ interface interface-list ]
View
Ethernet Port View
Parameter
macbased: Configures the 802.1x authentication system to perform
authentication on the supplicant based on MAC address.