Optional) Configuring The Authorization Status Of An Interface - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
----End
2.4.7 (Optional) Configuring the Authorization Status of an
Interface
Context
Do as follows to authorize users and control their access scope after users pass authentication.
You can configure the authorization status of an interface in the following ways.
Procedure
l
l
Issue 01 (2011-07-15)
CAUTION
When 802.1x users are online, you cannot use this command to change the access mode of
an interface.
In the system view:
1. Run:
system-view
The system view is displayed.
2. Run:
dot1x port-control { auto | authorized-force | unauthorized-force }
interface { interface-type interface-number1 [ to interface-number2 ] }
&<1-10>
The authorization status of interfaces is set.
You can configure the authorization status of interfaces in batches by specifying the
interface list in the dot1x port-control command in the system view.
In the interface view:
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
3. Run:
dot1x port-control { auto | authorized-force | unauthorized-force }
The authorization status of the interface is configured.
By default, the authorization status of an interface is auto.
– auto: An interface is initially in unauthorized state and sends and receives only EAPoL
packets. Therefore, users cannot access network resources. If a user passes the
authentication, the interface is in authorized state and allows users to access network
resources.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
60