3com 5500-ei pwr Installation Instruction

Page of 1072
 
1-14 
Configuring Basic 802.1x Functions 
Follow these steps to configure basic 802.1x functions: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Enable 802.1x globally 
dot1x 
Required 
By default, 802.1x is disabled 
globally. 
In system 
view 
dot1x interface interface-list 
interface interface-type 
interface-number
 
dot1x 
Enable 
802.1x for  
specified 
ports 
In port view 
quit 
Required 
By default, 802.1x is disabled on all 
ports. 
In system 
view 
dot1x port-control 
authorized-force | 
unauthorized-force | auto } 
interface interface-list ] 
interface interface-type 
interface-number
 
dot1x port-control 
{ authorized-force | 
unauthorized-force | auto } 
Set port 
authorization 
mode for 
specified 
ports 
In port view 
quit 
Optional 
By default, an 802.1x-enabled port 
operates in the auto mode. 
In system 
view 
dot1x port-method 
macbased | portbased } 
interface interface-list ] 
interface interface-type 
interface-number
 
dot1x port-method 
macbased | portbased } 
Set access 
control 
method for 
specified 
ports 
In port view 
quit 
Optional 
The default access control method 
on a port is MAC-based (that is, the 
macbased keyword is used by 
default). 
Set authentication method 
for 802.1x users 
dot1x 
authentication-method 
{ chap | pap | eap } 
Optional 
By default, a switch performs CHAP 
authentication in EAP terminating 
mode. 
Enable online user 
handshaking 
dot1x handshake enable 
Optional 
By default, online user handshaking 
is enabled. 
Enter Ethernet port view 
interface interface-type 
interface-number
 
— 
Enable the handshake 
packet protection function 
dot1x handshake secure 
Optional 
By default, the handshake packet 
protection function is disabled.