3Com 4500 26-PORT Switch User Manual


 
242 CHAPTER 11: USING AAA AND RADIUS COMMANDS
portbased: Configures the 802.1x authentication system to perform
authentication on the supplicant based on interface number.
interface interface-list: Ethernet interface list including several Ethernet
interfaces, expressed in the format
interface-list = { interface-num [ to
interface-num ] } & < 1-10 >
. interface-num specifies a single Ethernet
interface in the format
interface-num = { interface-type interface-num |
interface-name }
, where interface-type specifies the interface type,
interface-num specifies the interface number and interface-name specifies the
interface name. For the respective meanings and value ranges, see the parameters
in the Port Command chapter.
Description
Use the dot1x port-method command to configure the base for 802.1x to
perform access control on the specified interface. Use the
undo dot1x
port-method
command to restore the default access control base.
By default, the value is macbased.
This command is used to set the base for 802.1x to perform access control,
namely authenticate the users, on the specified interface. When
macbased is used,
the users accessing this interface must be authenticated independently, and as
such will be able to access the network as long as they independently require.
When
portbased is used, only the first user on that port needs to be
authenticated. Subsequent users accessing the network through this port are
considered authenticated. However if the original user terminates his connection,
the other users will need to be re-authenticated.
This command has an effect on the interface specified by the parameter
interface-list when executed in System View. It has an effect on all the interfaces
when no interface is specified. The parameter interface-list cannot be input when
the command is executed in Ethernet Port View and it has an effect only on the
current interface.
Related command: display dot1x.
Example
To authenticate the supplicant based on the port on Ethernet 1/0/3, enter the
following:
<4500>system-view
System View: return to User View with Ctrl-Z
[4500]dot1x port-method portbased interface ethernet 1/0/3
dot1x quiet-period Command
dot1x quiet-period
undo dot1x quiet-period
View
System View