auto—Places the port initially in the unauthorized state to allow only EAPOL packets to pass, and
•
after a user passes authentication, sets the port in the authorized state to allow access to the network.
You can use this option in most scenarios.
You can set authorization state for one port in interface view, or for multiple ports in system view. If
different authorization state is set for a port in system view and interface view, the one set later takes
effect.
To set the authorization state of a port:
Step
1.
Enter system view.
2.
Set the port authorization state
in system or Ethernet interface
view.
Specifying an access control method
You can specify an access control method for one port in interface view or for multiple ports in system
view. If different access control methods are specified for a port in system view and interface view, the
one specified later takes effect.
To specify the access control method:
Step
1.
Enter system view.
2.
Specify an access control
method in system or Ethernet
interface view.
Command
system-view
•
In system view:
dot1x port-control { authorized-force |
auto | unauthorized-force } [ interface
interface-list ]
•
In Ethernet interface view:
a.
interface interface-type
interface-number
b.
dot1x port-control
{ authorized-force | auto |
unauthorized-force }
Command
system-view
•
In system view:
dot1x port-method { macbased
| portbased } [ interface
interface-list ]
•
In Ethernet interface view:
a.
interface interface-type
interface-number
b.
dot1x port-method
{ macbased | portbased }
81
Remarks
N/A
By default, auto applies.
Remarks
N/A
By default, MAC-based access
control applies.
To use both 802.1X and portal
authentication on a port, you must
specify MAC-based access
control. For information about
portal authentication, see
"Configuring portal
authentication."