Ead Fast Deployment Configuration Commands; Dot1X Free-Ip - H3C S7500E Series Command Manual

Command Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches
Chapter 2 EAD Fast Deployment Configuration

2.1 EAD Fast Deployment Configuration Commands

2.1.1 dot1x free-ip

Syntax
dot1x free-ip ip-address { mask-address | mask-length }
undo dot1x free-ip { ip-address { mask | mask-length } | all }
View
System view
Parameters
ip-address: IP address of the freely accessible network segment, also called a free IP.
mask: Mask of the freely accessible network segment.
mask-length: Length of the mask of the freely accessible network segment.
Description
Use the dot1x free-ip command to configure a freely accessible network segment, that
is, a network segment that users can access before passing 802.1x authentication.
Use the undo dot1x free-ip command to remove one or all freely accessible network
segments.
By default, no freely accessible network segment is configured.
Note that:
The free IP function is mutually exclusive with the global MAC authentication
function and the port security function.
The free IP function is effective only when the port access control mode is auto.
The maximum number of freely accessible network segments varies by device.
Related commands: display dot1x.
Examples
# Configure 192.168.0.0 as a freely accessible network segment.
<Sysname> system-view
[Sysname] dot1x free-ip 192.168.0.0 24
Commands
2-1
Chapter 2 EAD Fast Deployment
Configuration Commands