Basic 802.1X Configuration; Configuration Prerequisites; Configuring Basic 802.1X Functions - H3C S5600 Series Operation Manual

Operation Manual – 802.1x and System Guard
H3C S5600 Series Ethernet Switches

1.3 Basic 802.1x Configuration

1.3.1 Configuration Prerequisites

Configure ISP domain and the AAA scheme to be adopted. You can specify a
RADIUS scheme or a local scheme.
Ensure that the service type is configured as lan-access (by using the
service-type command) if local authentication scheme is adopted.

1.3.2 Configuring Basic 802.1x Functions

Follow these steps to configure basic 802.1x functions:
Enter system view
Enable 802.1x globally
Enable
802.1x for
specified
ports
Set port
access
control
mode for
specified
ports
Set port
access
method for
specified
ports
To do... Use the command...
system-view
dot1x
In system dot1x interface
view interface-list
interface interface-type
interface-number
In port
view
dot1x
quit
dot1x port-control
{ authorized-force |
In system
unauthorized-force |
view
auto } [ interface
interface-list ]
interface interface-type
interface-number
dot1x port-control
In port
{ authorized-force |
view
unauthorized-force |
auto }
quit
dot1x port-method
{ macbased |
portbased } [ interface
interface-list ]
interface interface-type
interface-number
—
Required
By default, 802.1x is disabled
globally.
Required
By default, 802.1x is disabled
on all ports.
Optional
By default, an 802.1x-enabled
port operates in the auto
mode.
Optional
The default port access
method is
MAC-address-based (that is,
the macbased keyword is
used by default).
1-16
Chapter 1 802.1x Configuration
Remarks