dot1x port-method

Syntax

In system view:

dot1x port-method { macbased | portbased } [ interface interface-list ]

undo dot1x port-method [ interface interface-list ]

In Ethernet interface view:

dot1x port-method { macbased | portbased }

undo dot1x port-method

View

System view, Ethernet interface view

Default level

2: System level

Parameters

macbased: Uses MAC-based access control on a port to separately authenticate each user attempting to access the network. In this approach, when an authenticated user logs off, no other online users are affected.

portbased: Uses port-based access control on a port. In this approach, once an 802.1X user passes authentication on the port, any subsequent user can access the network through the port without authentication. When the authenticated user logs off, all other users are logged off.

interface interface-list: Specifies an Ethernet port list, which can contain multiple Ethernet ports. The interface-list argument is in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] } & <1-10>, where interface-type represents the port type, interface-number represents the port number, and & <1-10> means that you can provide up to 10 ports or port ranges for this argument. The start port number must be smaller than the end number and the two ports must be the same type.

Description

Use dot1x port-method to specify an access control method for the specified or all ports.

Use undo dot1x port-method to restore the default.

By default, MAC-based access control applies.

In system view, if no interface-list argument is specified, the command applies to all ports.

Related commands: display dot1x.

Examples

# Configure port Ethernet 1/0/1 to implement port-based access control.

<Sysname> system-view
[Sysname] dot1x port-method portbased interface ethernet 1/0/1

Or

<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] dot1x port-method portbased

# Configure ports Ethernet 1/0/2 through Ethernet 1/0/5 to implement port-based access control.

<Sysname> system-view
[Sysname] dot1x port-method portbased interface ethernet 1/0/2 to ethernet 1/0/5