802.1X must be enabled both globally in system view and for the intended ports in system view or
interface view. Otherwise, it does not function.
You can configure 802.1X parameters either before or after enabling 802.1X.
Related commands: display dot1x.
Examples
# Enable 802.1X for ports Ethernet 1/0/1, and Ethernet 1/0/5 to Ethernet 1/0/7.
<Sysname> system-view
[Sysname] dot1x interface ethernet 1/0/1 ethernet 1/0/5 to ethernet 1/0/7
Or
<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] dot1x
[Sysname-Ethernet1/0/1] quit
[Sysname] interface ethernet 1/0/5
[Sysname-Ethernet1/0/5] dot1x
[Sysname-Ethernet1/0/5] quit
[Sysname] interface ethernet 1/0/6
[Sysname-Ethernet1/0/6] dot1x
[Sysname-Ethernet1/0/6] quit
[Sysname] interface ethernet 1/0/7
[Sysname-Ethernet1/0/7] dot1x
# Enable 802.1X globally.
<Sysname> system-view
[Sysname] dot1x
dot1x authentication-method
Syntax
dot1x authentication-method { chap | eap | pap }
undo dot1x authentication-method
View
System view
Default level
2: System level
Parameters
chap: Sets the access device to perform Extensible Authentication Protocol (EAP) termination and use the
Challenge Handshake Authentication Protocol (CHAP) to communicate with the RADIUS server.
eap: Sets the access device to relay EAP packets, and supports any of the EAP authentication methods
to communicate with the RADIUS server.
pap: Sets the access device to perform EAP termination and use the Password Authentication Protocol
(PAP) to communicate with the RADIUS server.
Description
Use the dot1x authentication-method command to specify an EAP message handling method.
105