Table of Contents
Advertisement
dot1x port-control { authorized-force | auto | unauthorized-force } [ interface interface-list ]
undo dot1x port-control [ interface interface-list ]
In Layer 2 Ethernet interface view:
dot1x port-control { authorized-force | auto | unauthorized-force }
undo dot1x port-control
View
System view, Layer 2 Ethernet interface view
Default level
2: System level
Parameters
authorized-force: Places the specified or all ports in the authorized state, enabling users on the ports to
access the network without authentication.
auto: Places the specified or all ports initially in the unauthorized state to allow only EAPOL packets to
pass, and after a user passes authentication, sets the port in the authorized state to allow access to the
network. You can use this option in most scenarios.
unauthorized-force: Places the specified or all ports in the unauthorized state, denying any access
requests from users on the ports.
interface interface-list: Specifies an Ethernet port list, which can contain multiple Ethernet ports. The
interface-list argument is in the format of interface-list = { interface-type interface-number [ to interface-
type interface-number ] } & <1- 1 0>, where interface-type represents the port type, interface-number
represents the port number, and & <1- 1 0> means that you can provide up to 10 ports or port ranges. The
start port number must be smaller than the end number and the two ports must be of the same type.
Description
Use the dot1x port-control command to set the authorization state for the specified or all ports.
Use the undo dot1x port-control command to restore the default.
The default port authorization state is auto.
In system view, if no interface-list argument is specified, the command applies to all ports.
Related commands: display dot1x.
Examples
# Set the authorization state of port GigabitEthernet 1/0/1 to unauthorized-force.
<Sysname> system-view
[Sysname] dot1x port-control unauthorized-force interface gigabitethernet 1/0/1
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x port-control unauthorized-force
# Set the authorization state of ports GiagbitEthernet 1/0/2 through GigabitEthernet 1/0/5 to
unauthorized-force.
<Sysname> system-view
[Sysname]
gigabitethernet 1/0/5
dot1x
port-control
unauthorized-force
108
interface
gibabitethernet
1/0/2
to
Advertisement
Table of Contents
