HP MSR2000/3000/4000 Router Series Security Command Reference

89
handshake attempts (set by the dot1x retry command) has been made, the network access device sets
the user in the offline state.
Examples
# Enable the online user handshake function on Ethernet 1/1.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] dot1x handshake
Related commands
• display dot1x
• dot1x timer handshake-period
• dot1x retry
dot1x mandatory-domain
Use dot1x mandatory-domain to specify a mandatory 802.1X authentication domain on a port.
Use undo dot1x mandatory-domain to remove the mandatory authentication domain.
Syntax
dot1x mandatory-domain domain-name
undo dot1x mandatory-domain
Default
No mandatory authentication domain is specified.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
domain-name: Specifies the ISP domain name, a case-insensitive string of 1 to 24 characters.
Usage guidelines
When authenticating an 802.1X user trying to access a port, the system selects an authentication domain
in the following order: the mandatory domain, the ISP domain specified in the username, and the default
ISP domain.
Examples
# Configure the mandatory authentication domain my-domain for 802.1X users on Ethernet 1/1.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] dot1x mandatory-domain my-domain
Related commands
display dot1x