TP-Link T1600G-18TS Configuration Manual page 606

Configuring Network Security
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
The following example shows how to enable 802.1X authentication on port 1/0/2, configure
the control type as port-based, and configure the control mode as auto:
Switch#configure
interface {fastEthernet port | range fastEthernet port-list | gigabitEthernet port |
range gigabitEthernet port-list }
Enter interface configuration mode.
Enter the ID of the port to be configured.
port:
dot1x
Enable 802.1X authentication for the port.
dot1x port-method { mac-based | port-based }
Configure the control type for the port. By default, it is mac-based.
mac-based: All clients connected to the port need to be authenticated.
port-based: If a client connected to the port is authenticated, other clients can
access the LAN without authentication.
dot1x guest-vlan
(Optional) Enable guest VLAN on the port.
Note: Before enabling guest VLAN, the control type of the port should be configured
as port-based.
dot1x port-control { auto | authorized-force | unauthorized-force }
Configure the control mode for the port. By default, it is auto.
auto: If this option is selected, the port can access the network only when it is
authenticated.
authorized-force: If this option is selected, the port can access the network without
authentication.
unauthorized-force: If this option is selected, the port can never be authenticated.
show dot1x interface [fastEthernet port |gigabitEthernet port | ten-gigabitEthernet
port ]
(Optional) Verify the configurations of 802.1X authentication on the port.
Enter the ID of the port to be configured. If no specific port is entered, the
port:
switch will show configurations of all ports.
end
Return to privileged EXEC mode.
copy running-config startup-config
Save the settings in the configuration file.
802.1X Configuration
Configuration Guide 583