Huawei quidway s3526 series Getting Started page 609

Command Manual - Security
Quidway S3500 Series Ethernet Switches
Parameter
auto: Automatic identification mode, configuring the initial state of the interface as
unauthorized. The user is only allowed to receive or transmit EAPoL packets but not to
access the network resources. If the user passes the authentication flow, the interface
will switch over to the authorized state and then the user is allowed to access the
network resources. This is the most common case.
authorized-force: Forced authorized mode, configuring the interface to always stay in
authorized state and the user is allowed to access the network resources without
authentication/authorization.
unauthorized-force: Forced unauthorized mode, configuring the interface to always
stay in non-authorized mode and the user is not allowed to access the network
resources.
interface interface-list: Ethernet interface list including several Ethernet interfaces,
expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the
interface type, interface-num specifies the interface number and interface-name
specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
Description
Using dot1x port-control command, you can configure the mode for 802.1x to perform
access control on the specified interface. Using undo dot1x port-control command,
you can restore the default access control mode.
By default, the value is auto.
This command is used to set the mode, or the interface state, for 802.1x to perform
access control on the specified interface. This command has effect on the interface
specified by the parameter interface-list when executed in system view. It has effect on
all the interfaces when no interface is specified. The parameter interface-list cannot be
input when the command is executed in Ethernet port view and it has effect only on the
current interface.
For the related commands, see display dot1x.
Example
# Configure the interface Ethernet 0/1 to be in unauthorized-force state.
[Quidway] dot1x port-control unauthorized-force interface Ethernet 0/1
Huawei Technologies Proprietary
1-8
Chapter 1 802.1x Configuration Commands