Dot1X Port-Control - H3C S7500E Series Command Manual

Command Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches

1.1.8 dot1x port-control

Syntax
In system view:
dot1x port-control { authorized-force | auto | unauthorized-force } [ interface
interface-list ]
undo dot1x port-control [ interface interface-list ]
In Ethernet interface view:
dot1x port-control { authorized-force | auto | unauthorized-force }
undo dot1x port-control
View
System view, Ethernet interface view
Parameters
authorized-force: Places the specified or all ports in the state of authorized, allowing
users of the ports to access the network without authentication.
auto: Places the specified or all ports in the state of unauthorized initially to allow only
EAPOL frames to pass, and turns the ports into the state of authorized to allow access
to the network after the users pass authentication. This is the most common choice.
unauthorized-force: Places the specified or all ports in the state of unauthorized,
denying any access requests from users of the ports.
interface interface-list: Specifies an Ethernet port list, which can contain multiple
Ethernet ports. The interface-list argument is in the format of interface-list =
{ interface-type interface-number [ to interface-type interface-number ] } & <1-10>,
where interface-type represents the port type, interface-number represents the port
number, and & <1-10> means that you can provide up to 10 port indexes/port index lists
for this argument. The start port number must be smaller than the end number and the
two ports must of the same type.
Description
Use the dot1x port-control command to set the access control mode for specified or
all ports.
Use the undo dot1x port-control command to restore the default.
The default access control mode is auto.
Related commands: display dot1x.
Examples
# Set the access control mode of port Ethernet 2/0/1 to unauthorized-force.
Chapter 1 802.1x Configuration Commands
1-11