R2511-HP MSR Router Series Security Command Reference(V5)

143
EAD fast deployment commands
dot1x free-ip
Use dot1x free-ip to configure a free IP. Users can access the segment before passing 802.1X
authentication.
Use undo dot1x free-ip to remove the specified or all free IP addresses.
Syntax
dot1x free-ip ip-address { mask-address | mask-length }
undo dot1x free-ip { ip-address { mask | mask-length } | all }
Default
No free IP is configured.
Views
System view
Default command level
2: System level
Parameters
ip-address: Specifies a freely accessible IP address segment, also called "a free IP."
mask: Specifies an IP address mask.
mask-length: Specifies IP address mask length.
all: Removes all free IP addresses.
Usage guidelines
When global MAC authentication, Layer-2 portal authentication, or port security is enabled, the free IP
does not take effect.
A maximum of six free IP addresses can be configured on a device.
The free IP takes effect only on the port that is in the authorization state of auto.
The following matrix shows the command and router compatibility:
Command MSR900 MSR93
X
MSR20-1
X
MSR20 MSR30 MSR50 MSR1000
dot1x
free-ip
No No No No
Only available on
MSR30-11E and
MSR30-11F
No No
Examples
# Configure 192.168.0.0/24 as a free IP address.
<Sysname> system-view
[Sysname] dot1x free-ip 192.168.0.0 24