3Com 8807 Configuration Manual page 224

224 C 25: 802.1
HAPTER X
Setting the Port Access
Control Mode
Setting Port Access
Control Method
C
ONFIGURATION
Table 184 Enable/Disable 802.1x
Operation
Enable the 802.1x
Disable the 802.1x
By default, 802.1x authentication has not been enabled globally and on any port.
You cannot enable 802.1x on a port before you enable it globally. And you must
disable 802.1x on each port before you disable 802,1x globally.
The following commands can be used for setting 802.1x access control mode on
the specified port. When no port is specified, the access control mode of all ports
is configured.
Perform the following configuration in system view or Ethernet port view.
Table 185 Set the port access control mode
Operation
Set the port access control mode
Restore the default access control mode of
the port
auto (automatic identification mode, which is also called protocol control mode).
That is, the initial state of the port is unauthorized. It only permits EAPoL packets
receiving/transmitting and does not permit the user to access the network
resources. If the authentication flow is passed, the port will be switched to the
authorized state and permit the user to access the network resources.
The authorized-force keyword specifies the port to operate in authorized-force
mode. Ports in this mode are always authorized. Users can access a network
through this kind of port without being authorized.
The unauthorized-force keyword specifies the port to operate in
unauthorized-force mode. Ports in this mode are always unauthorized. They do
not respond to authorization requests. Users cannot access a network through this
kind of port.
By default, the mode of 802.1x performing access control on the port is auto
(automatic identification mode).
The following commands are used for setting 802.1x access control method on
the specified port. When no port is specified in system view, the access control
method of all ports is configured.
Perform the following configuration in system view or Ethernet port view.
Command
dot1x [ interface interface-list ]
undo dot1x [ interface interface-list ]
Command
dot1x port-control { authorized- force |
unauthorized-force | auto } [ interface
interface-list ]
undo dot1x port-control [ interface
interface-list ]