Setting the port authorization state
The port authorization state determines whether the client is granted access to the network. Control the
authorization state of a port by using dot1x port-control and the following keywords:
authorized-force—Places the port in the authorized state, enabling users on the port to access the
•
network without authentication.
unauthorized-force—Places the port in the unauthorized state, denying any access requests from
•
users on the port.
auto—Places the port initially in the unauthorized state to allow only EAPOL packets to pass, and
•
after a user passes authentication, sets the port in the authorized state to allow access to the
network. Use this option in most scenarios.
Set authorization state for one port in interface view or for multiple ports in system view. If a different
authorization state is set for a port in system view and interface view, the one set later takes effect.
To set the authorization state of a port:
To do...
1.
Enter system view.
2.
Set the port
authorizati
on state.
Specifying an access control method
Specify an access control method for one port in interface view or for multiple ports in system view. If
different access control methods are specified for a port in system view and interface view, the one
specified later takes effect.
To specify the access control method:
To do...
1.
Enter system view.
2.
Specify an
access
control
method.
Command...
system-view
dot1x port-control { authorized-force |
In system view
auto | unauthorized-force } [ interface
interface-list ]
interface interface-type interface-number
In Ethernet
dot1x port-control { authorized-force |
interface view
auto | unauthorized-force }
Command...
system-view
dot1x port-method { macbased |
In system view
portbased } [ interface interface-
list ]
interface interface-type interface-
number
In Ethernet
interface view
dot1x port-method { macbased |
portbased }
Remarks
—
Optional.
Use either approach.
By default, MAC-based access
control applies.
84
Remarks
—
Optional.
Use either approach.
By default, auto applies.