User Manual

[Note]
This command can be specified only for both LAN/SFP port and logical interface.
[Example]
This command can be specified only for LAN/SFP port.
SWR2310(config)#interface port1.1
SWR2310(config-if)#dot1x port-control auto
5.3.5 Set for forwarding control on an unauthenticated port for IEEE 802.1X authentication
[Syntax]
dot1x control-direction direction
no dot1x control-direction
[Parameter]
direction : Sets the packet forwarding operation for unauthenticated ports
Forwarding operation Description
both Both send and receive packets are discarded.
in Only receive packets are discarded.
[Initial value]
dot1x control-direction both
[Input mode]
interface mode
[Description]
Changes the packet forwarding operation for the applicable interface when the IEEE 802.1X authentication is unauthenticated.
If this command is executed with the "no" syntax, the setting returns to the default.
When "both" is specified, the packets received from the supplicant are discarded, and the broadcast/multicast packets to the
interface to which the supplicant is connected from other ports are also discarded.
When "in" is specified, only packets received from the supplicant are discarded, and the broadcast/multicast packets to the
interface to which the supplicant is connected from other ports are forwarded.
[Note]
This command can be specified only for both LAN/SFP port and logical interface.
If the host mode is set as multi-supplicant mode for the corresponding interface, or if it is used in conjunction with MAC
authentication, the "in" setting is automatic.
When the guest VLAN is configured using the applicable interface, the settings for this command will be disabled.
Changing the settings for this command will make the authentication state return to the default.
To use this command, you must enable the port authentication function for the applicable interface. (dot1x port-control
command)
[Example]
Discard received packets only for the packet forwarding operation on an unauthenticated port of LAN port #1.
SWR2310(config)#interface port1.1
SWR2310(config-if)#dot1x control-direction in
5.3.6 Set the EAPOL packet transmission count
[Syntax]
dot1x max-auth-req count
no dot1x max-auth-req
[Parameter]
count : <1-10>
Maximum number of times EAPOL packets are transmitted
150 | Command Reference | Interface control