H3C S6812 Series Command Reference Manual page 1787

Predefined user roles
network-admin
Usage guidelines
The multicast trigger feature enables the device to act as the initiator. The device periodically
multicasts EAP-Request/Identity packets out of a port to detect 802.1X clients and trigger
authentication. You can use the dot1x timer tx-period command to set the interval for sending
multicast EAP-Request/Identity packets.
Examples
# Enable the multicast trigger feature on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x multicast-trigger
Related commands
display dot1x
dot1x timer tx-period
dot1x unicast-trigger
dot1x port-control
Use dot1x port-control to set the authorization state for the port.
Use undo dot1x port-control to restore the default.
Syntax
dot1x port-control { authorized-force | auto | unauthorized-force }
undo dot1x port-control
Default
The default port authorization state is auto.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
authorized-force: Places the port in authorized state, enabling users on the port to access the
network without authentication.
auto: Places the port initially in unauthorized state to allow only EAPOL packets to pass, and places
the port in authorized state after a user passes authentication. You can use this option in most
scenarios.
unauthorized-force: Places the port in unauthorized state, denying any access requests from users
on the port.
Usage guidelines
You can use this command to set the port authorization state to determine whether a client is granted
access to the network.
Examples
# Set the authorization state of Ten-GigabitEthernet 1/0/1 to unauthorized-force.
19