H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches Chapter 1 802.1x Configuration
1-15
1.2.3 Configuring 802.1x for a Port
I. Enabling 802.1x for a port
Follow these steps to enable 802.1x for a port:
To do… Use the command… Remarks
Enter system view
system-view
—
In system
view
dot1x interface interface-list
interface interface-type
interface-number
Enable
802.1x for
one or
more ports
In Ethernet
interface
view
dot1x
Required
Use either
approach.
Disabled by default
II. Configuring 802.1x parameters for a port
Follow these steps to configure 802.1x parameters for a port:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet interface
view
interface interface-type
interface-number
—
Set the port access
control mode for the port
dot1x port-control
{ authorized-force | auto
| unauthorized-force }
Optional
auto by default
Set the port access
control method for the port
dot1x port-method
{ macbased |
portbased }
Optional
macbased by default
Set the maximum number
of users for the port
dot1x max-user
user-number
Optional
By default, the maximum
number of concurrent
users accessing a port is
1024.
Enable online user
handshake
dot1x handshake
Optional
Enabled by default
Enable detection and
control of users logging in
through proxies for the
port
dot1x supp-proxy-check
{ logoff | trap }
Optional
Disabled by default
Enable multicast trigger
dot1x multicast-trigger
Optional
Enabled by default
Note that: