H3C S7500 Series Ethernet Switches Command Manual

Command Manual – 802.1x
H3C S7500 Series Ethernet Switches Chapter 1
802.1x Configuration Commands
1-11
Examples
# Configure Ethernet 3/0/1 to operate in unauthorized-force access control mode.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] dot1x port-control unauthorized-force interface Ethernet 3/0/1
1.1.8 dot1x port-method
Syntax
dot1x port-method { macbased | portbased } [ interface interface-list ]
undo dot1x port-method [ interface interface-list ]
View
System view, Ethernet port view
Parameters
macbased: Authenticates supplicant systems by MAC addresses.
portbased: Authenticates supplicant systems by port numbers.
interface-list: Ethernet port list. You can specify multiple Ethernet ports by providing this
argument in the form of interface-list = { interface-name [ to interface- name] & < 1-10 >.
The interface-name argument is the port index of an Ethernet port and can be specified
in this form: interface-name = { interface-type interface-num }, where interface-type
specifies the type of a port and interface-num identifies the port number. "&<1-10>"
means that up to 10 port indexes/port index lists can be provided.
The default access control method is MAC address-based.
Description
Use the dot1x port-method command to specify the access control method for the
specified Ethernet ports.
Use the undo dot1x port-method command to restore the default.
If you specify to authenticate supplicant systems by MAC addresses, all supplicant
systems connected to the specified Ethernet ports need to be authenticated separately.
And if an online supplicant system logs off, others are not affected.
If you specify to authenticate supplicant systems by port numbers, all supplicant
systems connected to the specified Ethernet ports are able to access the network
without being authenticated if a supplicant system among them passes the
authentication. And when the supplicant system logs off, the network is inaccessible to
all other supplicant systems either.
When being executed in system view, these two commands apply to all Ethernet ports
of the switch if you do not provide the interface-list argument. And if you specify the