Command Reference Guide

Port-Based Network Access Control Commands
CLI Command Reference
September 2014 Page 333
HP Moonshot Switch Module CLI Command Reference
Port-Based Network Access Control Commands
This section describes the commands you use to configure port-based network access control (IEEE 802.1X).
Port-based network access control allows you to permit access to network services only to and devices that are
authorized and authenticated.
aaa authentication dot1x default
Use this command to configure the authentication method for port-based access to the switch. The possible
methods are as follows:
• ias. Uses the internal authentication server users database for authentication. This method can be used in
conjunction with any one of the existing methods like local, radius, etc.
• local. Uses the local username database for authentication.
• none. Uses no authentication.
• radius. Uses the list of all RADIUS servers for authentication.
Example: The following is an example of the command.
(Routing) #
(Routing) #configure
(Routing) (Config)#aaa authentication dot1x default ias
clear dot1x statistics
This command resets the 802.1X statistics for the specified port or for all ports.
clear dot1x authentication-history
This command clears the authentication history table captured during successful and unsuccessful
authentication on all interface or the specified interface.
Format
aaa authentication dot1x default {ias| local | none | radius}
Mode Global Config
Format
clear dot1x statistics {unit/slot/port | all}
Mode Privileged EXEC
Format
clear dot1x authentication-history [unit/slot/port]
Mode Privileged EXEC