Configuring 802.1X For A Port - 3Com S7906E Configuration Manual

Configuring 802.1X for a Port

Enabling 802.1X for a port
Follow these steps to enable 802.1X for a port:
To do...
Enter system view
Enable
802.1X for
one or more
ports
Configuring 802.1X parameters for a port
Follow these steps to configure 802.1X parameters for a port:
To do...
Enter system view
Enter Ethernet interface view
Specify the port authorization
mode for the port
Specify the port access control
method for the port
Set the maximum number of
users for the port
Note that:
Enabling 802.1X on a port is mutually exclusive with adding the port to an aggregation group and
adding the port to a service loopback group.
For a user-side device sending untagged traffic, the voice VLAN function and 802.1X are mutually
exclusive and cannot be configured together on the same port. For details about voice VLAN, refer
to VLAN Configuration in the Access Volume.
In EAP relay authentication mode, the device encapsulates the 802.1X user information in the EAP
attributes of RADIUS packets and sends the packets to the RADIUS server for authentication. In
this case, you can configure the user-name-format command but it does not take effect. For
information about the user-name-format command, refer to AAA Commands in the Security
Volume.
If the username of a client contains the version number or one or more blank spaces, you can
neither retrieve information nor disconnect the client by using the username. However, you can use
items such as IP address and connection index number to do so.
Use the command...
system-view
In system
dot1x interface interface-list
view
interface interface-type
In Ethernet
interface-number
interface view
dot1x
Use the command...
system-view
interface interface-type
interface-number
dot1x port-control
{ authorized-force | auto |
unauthorized-force }
dot1x port-method
{ macbased | portbased }
dot1x max-user user-number
1-15
Remarks
—
Required
Use either approach.
Disabled by default
Remarks
—
—
Optional
auto by default
Optional
macbased by default
Optional
1024 by default