Filter
Top Products
217
while the user is offline, an “offline” message will not inform Radius authentication server.
Example: Enable the switch AAA accounting function.
Switch(Config)#aaa-accounting enable
8.2.2.3 dot1x accept-mac
Command: dot1x accept-mac <mac-address> [interface <interface-name>]
no dot1x accept-mac <mac-address> [interface <interface-name>]
Function: adds one MAC address list to dot1x address filter table. If specify port, the add
list only be suitable for specific port; if not specify port, the add list may be suitable for all
port; use the “no” command to remove address filter list of dot1x.
Parameter: <mac-address>is MAC address; <interface-name>is interface name and
interface IID;
Command mode: global configuration mode
Default: None.
Instructions: The switch dot1x address filter function is according to MAC address filter
list to achieve, dot1x address filter list manual add or remove by user. If specified port
while add dot1x address filter list, this address filter list is only suitable for this port; If not
specified port while add, this address filter list suitable for all switch port. When switch
dot1x address filter function is enable, switch filter the authentication MAC address, Only
the authentication requirement which from dot1x address filter list will be accept,
otherwise will be refuse.
Example: Add MAC address 00-01-34-34-2e-0a to Ethernet 1/5 filter list.
Switch(Config)#dot1x accept-mac 00-01-34-34-2e-0a interface ethernet 1/5
8.2.2.4 dot1x eapor enable
Command: dot1x eapor enable
no dot1x eapor enable
Function: Configure switch to adopt EAP relay authentication; use the “no” command
to configure switch to adopt EAP local terminating authentication .
Command mode: global configuration mode
Default: switch adopt EAP relay authentication.
Instructions: it may use Ethernet or PPP method to connect between switch and Radius
authentication server. If use Ethernet connection between switch and Radius
authentication server, the switch needs to adopt EAP relay authentication (that is EAPoR
authentication); If using PPP connection between switch and Radius authentication
server, the switch needs to adopt EAP local terminating authentication (that is CHAP
authentication. According to the different method between switch and authentication
server, the switch should adopt different authentication methods to authenticate.
Example: Configure switch to adopt EAP local terminating authentication.
Switch(Config)#no dot1x eapor enable