Enabling/Disabling 802.1X; Setting The Port Access Control Mode - Huawei Quidway S6500 Series Operation Manual

Operation Manual - Security
Quidway S6500 Series Ethernet Switches

1.2.1 Enabling/Disabling 802.1x

The following command can be used to enable/disable the 802.1x on the specified port
or globally. When it is used in system view, if the parameter interface-list is not specified,
802.1x will be globally enabled. If the parameter interface-list is specified, 802.1x will be
enabled on the specified port. When this command is used in Ethernet port view, the
parameter interface-list cannot be input and 802.1x can only be enabled on the current
port.
Perform the following configurations in system view or Ethernet port view.
Table 1-1 Enabling/disabling 802.1x
Enable the 802.1x
Disable the 802.1x
You can configure 802.1x on individual port before it is enabled globally. The
configuration will take effect right after 802.1x is enabled globally.
By default, 802.1x authentication has not been enabled globally and on any port.

1.2.2 Setting the Port Access Control Mode.

The following commands can be used for setting 802.1x access control mode on the
specified port. When no port is specified, the access control mode of all ports is
configured.
Perform the following configurations in system view or Ethernet port view.
Table 1-2 Setting the port access control mode.
Set the port access control mode.
Restore the default access control
mode of the port.
By default, the mode of 802.1x performing access control on the port is auto (automatic
identification mode, which is also called protocol control mode). That is, the initial state
of the port is unauthorized. It only permits EAPoL packets receiving/transmitting and
does not permit the user to access the network resources. If the authentication flow is
passed, the port will be switched to the authorized state and permit the user to access
the network resources. This is the most common case.
Operation
Operation
Huawei Technologies Proprietary
Command
dot1x [ interface interface-list ]
undo dot1x [ interface interface-list ]
dot1x port-control { authorized- force |
unauthorized-force | auto } [ interface
interface-list ]
undo dot1x
interface-list ]
1-4
Chapter 1 802.1x Configuration
Command
[
port-control interface