Dot1X Port-Method - H3C S3100 Series Command Manual

Related command: display dot1x.
Example
# Specify Ethernet1/0/1 port to operate in unauthorized-force access control mode.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x port-control unauthorized-force interface Ethernet 1/0/1

dot1x port-method

Syntax
dot1x port-method { macbased | portbased } [ interface interface-list ]
undo dot1x port-method [ interface interface-list ]
View
System view, Ethernet port view
Parameter
macbased: Performs MAC address-based authentication.
portbased: Performs port-based authentication.
interface-list: Ethernet port list, in the form of interface-list= { interface-type interface-number [ to
interface-type interface-number ] } &<1-10>, in which interface-type specifies the type of an Ethernet
port and interface-number is the number of the port. The string "&<1-10>" means that up to 10 port lists
can be provided.
Description
Use the dot1x port-method command to specify the access control method for specified Ethernet
ports.
Use the undo dot1x port-method command to revert to the default access control method.
By default, the access control method is macbased.
This command specifies the way in which the users are authenticated.
If you specify to authenticate users by MAC addresses (that is, executing the dot1x port-method
command with the macbased keyword specified), all the users connected to the specified Ethernet
ports are authenticated separately. And if an online user logs off, others are not affected.
If you specify to authenticate supplicant systems by port numbers (that is, executing the dot1x
port-method command with the portbased keyword specified), all the users connected to a
specified Ethernet port are able to access the network without being authenticated if a user among
them passes the authentication. And when the user logs off, the network is inaccessible to all other
supplicant systems either.
Changing the access control method on a port by the dot1x port-method command will forcibly log
out the online 802.1x users on the port.
In system view:
If you do not provide the interface-list argument, these two commands apply to all the ports of the
switch.
If you specify the interface-list argument, these commands apply to the specified ports.
1-13