Huawei Quidway S5600 Series Operation Manual page 517

Operation Manual – 802.1x
Quidway S5600 Series Ethernet Switches-Release 1510
Operation
Set port
control mode for
specified ports
Set port
method
specified ports
Set authentication
method for 802.1x
users
Caution:
802.1x-related configurations can all be performed in system view. Port access
control mode and port access method can also be configured in port view.
If you perform a configuration in system view and do not specify the interface-list
argument, the configuration applies to all ports. Configurations performed in
Ethernet port view apply to the current Ethernet port only and the interface-list
argument is not needed in this case.
802.1x configurations take effect only after you enable 802.1x both globally and for
specified ports.
If you enable 802.1x for a port, it is not available to use the mac-address
max-mac-count command to set the maximum number of MAC addresses that can
be learnt for the port. Meanwhile, if you set the maximum number of MAC addresses
that can be learnt for a port, it is prohibited to enable 802.1x for the port.
If you enable 802.1x for a port, it is not available to add the port to an aggregation
group. Meanwhile, if a port has been added to an aggregation group, it is prohibited
to enable 802.1x for the port.
Command
dot1x
access
{ authorized-force
unauthorized-force | auto }
[ interface interface-list ]
access dot1x
for { macbased | portbased }
[ interface interface-list ]
dot1x
authentication-method
{ chap | pap | eap }
Huawei Technologies Proprietary
1-14
Chapter 1 802.1x Configuration
Optional
port-control
|
By default, an 802.1x-enabled
port operates in an auto
mode.
Optional
The
port-method
method
MAC-address-based (that is,
the
used by default).
Optional
By default, a switch performs
CHAP authentication in EAP
terminating mode.
Description
default port access
macbased keyword is
is