H3C S5100-SI Operation Manual page 258

To do...
In system
view
Set port
access
control
mode for
specified
In port
ports
view
In system
view
Set port
access
method for
specified
ports In port
view
Set authentication
method for 802.1x users
Enable online user
handshaking
Enter Ethernet port view
Enable the handshake
packet protection
function
Use the command...
quit
dot1x port-control
{ authorized-force |
unauthorized-force |
auto } [ interface
interface-list ]
interface interface-type
interface-number
dot1x port-control
{ authorized-force |
unauthorized-force |
auto }
quit
dot1x port-method
{ macbased | portbased }
[ interface interface-list ]
interface interface-type
interface-number
dot1x port-method
{ macbased | portbased }
quit
dot1x
authentication-method
{ chap | pap | eap }
dot1x handshake enable
interface interface-type
interface-number
dot1x handshake secure
1-15
Remarks
Optional
By default, an 802.1x-enabled
port operates in the auto mode.
Optional
The default port access method
is MAC-address-based (that is,
the macbased keyword is used
by default).
Optional
By default, a switch performs
CHAP authentication in EAP
terminating mode.
Optional
By default, online user
handshaking is enabled.
—
Optional
By default, the handshake
packet protection function is
disabled.