3com 8807 Reference Guide
300
C
HAPTER
20: 802.1
X
C
ONFIGURATION
C
OMMANDS
Example
# Configure the interface Ethernet 3/1/1 to hold no more than 32 users.
[SW8800] dot1x max-user 32 interface Ethernet 3/1/1
dot1x port-control
Syntax
dot1x port-control { auto | authorized-force | unauthorized-force } [
interface interface-list ]
interface interface-list ]
undo dot1x port-control [ interface interface-list ]
View
System view, Ethernet interface view
Parameter
auto: Automatic identification mode, showing that the initial state of the
interface is unauthorized. The user is only allowed to receive or transmit EAPoL
packets but not to access the network resources. If the user passes the
authentication flow, the interface will switch over to the authorized state and then
the user is allowed to access the network resources. This is the most common
case.
interface is unauthorized. The user is only allowed to receive or transmit EAPoL
packets but not to access the network resources. If the user passes the
authentication flow, the interface will switch over to the authorized state and then
the user is allowed to access the network resources. This is the most common
case.
authorized-force: Forced authorized mode, showing that the interface to always
stay in authorized state and the user is allowed to access the network resources
without authentication/authorization.
stay in authorized state and the user is allowed to access the network resources
without authentication/authorization.
unauthorized-force: Forced unauthorized mode, showing that the interface to
always stay in non-authorized mode, the switch does not respond to
authentication requests and the user is not allowed to access the network
resources.
always stay in non-authorized mode, the switch does not respond to
authentication requests and the user is not allowed to access the network
resources.
interface interface-list: Ethernet interface list expressed in the format interface-list
=interface-type interface-number [ to interface-type interface-number ] &<1-10>.
interface-type means the interface type, interface-number is the interface number.
Refer to command parameters in the "Port" section in the manual for the
respective meanings and value ranges of them. The interface number after the key
word to should be no smaller than the interface number before to. &<1-10> in
the command means that the preceding parameter can be entered up to 10 times.
=interface-type interface-number [ to interface-type interface-number ] &<1-10>.
interface-type means the interface type, interface-number is the interface number.
Refer to command parameters in the "Port" section in the manual for the
respective meanings and value ranges of them. The interface number after the key
word to should be no smaller than the interface number before to. &<1-10> in
the command means that the preceding parameter can be entered up to 10 times.
Description
Use the dot1x port-control command to configure the mode for 802.1x to
perform access control on the specified interface.
perform access control on the specified interface.
Use the undo dot1x port-control command to restore the default access control
mode.
mode.
By default, the access control mode is auto.
This command is used to set the mode, or the interface state, for 802.1x to
perform access control on the specified interface. This command has effect on the
interface specified by the parameter interface-list when executed in system view. It
has effect on all the interfaces when no interface is specified. The parameter
perform access control on the specified interface. This command has effect on the
interface specified by the parameter interface-list when executed in system view. It
has effect on all the interfaces when no interface is specified. The parameter