Command Reference Guide

Port-Based Network Access Control Commands
CLI Command Reference
September 2014 Page 337
HP Moonshot Switch Module CLI Command Reference
dot1x port-control all
This command sets the authentication mode to use on all ports. Select force-unauthorized to specify that the
authenticator PAE unconditionally sets the controlled port to unauthorized. Select
force-authorized to specify
that the authenticator PAE unconditionally sets the controlled port to authorized. Select
auto to specify that
the authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges
between the supplicant, authenticator and the authentication server. If the
mac-based option is specified, then
MAC-based dot1x authentication is enabled on the port.
no dot1x port-control all
This command sets the authentication mode on all ports to the default value.
dot1x mac-auth-bypass
If the 802.1X mode on the interface is mac-based, you can optionally use this command to enable MAC
Authentication Bypass (MAB) on an interface. MAB is a supplemental authentication mechanism that allows
802.1X unaware clients – such as printers, fax machines, and some IP phones — to authenticate to the network
using the client MAC address as an identifier.
no dot1x mac-auth-bypass
This command sets the MAB mode on the ports to the default value.
Default auto
Format
dot1x port-control all {force-unauthorized | force-authorized | auto | mac-based}
Mode Global Config
Format
no dot1x port-control all
Mode Global Config
Default disabled
Format
dot1x mac-auth-bypass
Mode Interface Config
Format
no dot1x mac-auth-bypass
Mode Interface Config