3Com 4210 9-Port Configuration Manual page 305

authority (that is, the user domain names are the same). This allows you to deploy 802.1X access
policies flexibly.
Table 1-3 shows the relations of the 802.1X username entered for authentication, mandatory
authentication domain configured for the port connecting users, authentication domain for users, and
username suffix on the RADIUS server.
Table 1-3 Authentication domain configuration relations
Mandatory
802.1X
authentication
username
domain
Not configured
X@Y
Z
Not configured
X
Z
Note that:
You can view usernames by using the display connection command on the device.
The above configuration relations are applicable to the switch with authentication domain Y or Z
configured. If the specified mandatory authentication domain on a port does not exist on the switch,
the 802.1X authentication fails.
With a mandatory authentication domain specified for a port, the system uses the mandatory
authentication domain for authentication, authorization, and accounting of all 802.1X users on the port.
Follow these steps to specify a mandatory authentication domain for a port:
Operation
Enter system view
Enter Ethernet interface view
Specify a mandatory authentication
domain for the port
Authentication Username
domain displayed
Y X@Y
Z X@Y
X@Default
Default domain
domain
Z X@Z
Command
system-view
interface interface-type
interface-number
dot1x mandatory-domain
domain-name
1-16
Username
Commands used
user-name-format
Y
with-domain
user-name-format
—
without-domain
user-name-format
Y
with-domain
user-name-format
—
without-domain
user-name-format Default
with-domain domain
user-name-format
—
without-domain
user-name-format
Z
with-domain
user-name-format
—
without-domain
Remarks
—
—
Required
Not specified by default
suffix