mac

Commands for 802.1x
441
Default: EAP relay authentication is used by default.
Usage Guide: The switch and RADIUS may be connected via Ethernet or PPP. If an
Ethernet connection exists between the switch and RADIUS server, the switch needs to
authenticate the user by EAP relay (EAPoR authentication); if the switch connects to the
RADIUS server by PPP, the switch will use EAP local end authentication (CHAP
authentication). The switch should use different authentication methods according to the
connection between the switch and the authentication server.
Example: Setting EAP local end authentication for the switch.
Switch(config)#no dot1x eapor enable
38.7 dot1x enable
Command: dot1x enable
no dot1x enable
Function: Enables the 802.1x function in the switch and ports: the "no dot1x enable"
command disables the 802.1x function.
Command mode: Global Mode and Port Mode.
Default: 802.1x function is not enabled in global mode by default; if 802.1x is enabled
under Global Mode, 802.1x will not be enabled for the ports by default.
Usage Guide: The 802.1x authentication for the switch must be enabled first to enable
802.1x authentication for the respective ports. If Spanning Tree or MAC binding is
enabled on the port, or the port is a Trunk port or member of port aggregation group,
802.1x function cannot be enabled for that port unless such conditions are removed.
Example: Enabling the 802.1x function of the switch and enable 802.1x for port1/12.
Switch(config)#dot1x enable
Switch(config)#interface ethernet 1/12
Switch(Config-If-Ethernet1/12)#dot1x enable
38.8 dot1x ipv6 passthrough
Command: dot1x ipv6 passthrough
no dot1x ipv6 passthrough
Function: Enable IPv6 passthrough function on a switch port, only applicable when
access control mode is userbased; the no operation of this command will disable the
function.
Command Mode: Port Configuration Mode.
Default Settings: IPv6 passthrough function is disabled on the switch by default.