R0106-HP MSR Router Series Security Command Reference(V7)

134
dot1x unicast-trigger
Use dot1x unicast-trigger to enable the 802.1X unicast trigger function.
Use undo dot1x unicast-trigger to disable the function.
Syntax
dot1x unicast-trigger
undo dot1x unicast-trigger
Default
The unicast trigger function is disabled.
Views
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
The unicast trigger function enables the network access device to initiate 802.1X authentication when it
receives a data frame from an unknown source MAC address. The device sends a unicast Identity
EAP/Request packet to the unknown source MAC address, and retransmits the packet if it has received
no response within a period of time (set with the dot1x timer tx-period command). This process continues
until the maximum number of request attempts (set with the dot1x retry command) is reached.
Examples
# Enable the unicast trigger function on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] dot1x unicast-trigger
Related commands
• display dot1x
• dot1x multicast-trigger
• dot1x retry
• dot1x timer
reset dot1x guest-vlan
Use reset dot1x guest-vlan to remove users from the 802.1X guest VLAN on a port.
Syntax
reset dot1x guest-vlan interface interface-type interface-number [ mac-address mac-address ]
Views
User view
Predefined user roles
network-admin