dot1x port-control

Syntax

In system view:

dot1x port-control { authorized-force | auto | unauthorized-force } [ interface interface-list ]

undo dot1x port-control [ interface interface-list ]

In Ethernet interface view:

dot1x port-control { authorized-force | auto | unauthorized-force }

undo dot1x port-control

View

System view, Ethernet interface view

Default level

2: System level

Parameters

authorized-force: Places the specified or all ports in the authorized state, enabling users on the ports to access the network without authentication.

auto: Places the specified or all ports initially in the unauthorized state to allow only EAPOL packets to pass, and after a user passes authentication, sets the port in the authorized state to allow access to the network. You can use this option in most scenarios.

unauthorized-force: Places the specified or all ports in the unauthorized state, denying any access requests from users on the ports.

interface interface-list: Specifies an Ethernet port list, which can contain multiple Ethernet ports. The interface-list argument is in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] } & <1-10>, where interface-type represents the port type, interface-number represents the port number, and & <1-10> means that you can provide up to 10 ports or port ranges. The start port number must be smaller than the end number and the two ports must be of the same type.

Description

Use dot1x port-control to set the authorization state for the specified or all ports.

Use undo dot1x port-control to restore the default.

The default port authorization state is auto.

In system view, if no interface-list argument is specified, the command applies to all ports.

Related commands: display dot1x.

Examples

# Set the authorization state of port Ethernet 1/0/1 to unauthorized-force.

<Sysname> system-view
[Sysname] dot1x port-control unauthorized-force interface ethernet 1/0/1

Or

<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] dot1x port-control unauthorized-force

# Set the authorization state of ports Ethernet 1/0/2 through Ethernet 1/0/5 to unauthorized-force.

<Sysname> system-view
[Sysname] dot1x port-control unauthorized-force interface ethernet 1/0/2 to ethernet 1/0/5