Enabling 802.1X

If the PVID of a port is a voice VLAN, the 802.1X function cannot take effect on the port. For more information about voice VLANs, see Layer 2—LAN Switching Configuration Guide.
802.1X is mutually exclusive with link aggregation and service loopback group configuration on a port.
On an 802.1X and MAC authentication enabled port, the EAP packet from an unknown MAC address immediately triggers 802.1X authentication, and any other type of packet from an unknown MAC address immediately triggers MAC authentication.
Do not use the BPDU drop feature on an 802.1X-enabled port. The BPDU drop feature discards 802.1X packets arrived on the port.

To enable 802.1X:

Step	Command	Remarks
1. Enter system view.	system-view	N/A
2. Enable 802.1X globally.	dot1x	By default, 802.1X is disabled globally.
3. Enable 802.1X on a port.	(Approach 1) In system view:dot1x interface interface-list (Approach 2) In Layer 2 Ethernet interface view: interface interface-type interface-number dot1x	Use either approach. By default, 802.1X is disabled on a port.

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable 802.1X globally.

dot1x

By default, 802.1X is disabled globally.

3. Enable 802.1X on a port.

(Approach 1) In system view:dot1x interface interface-list
(Approach 2) In Layer 2 Ethernet interface view:
1. interface interface-type interface-number
2. dot1x

Use either approach.

By default, 802.1X is disabled on a port.

prev	up	next
802.1X configuration task list	home	Enabling EAP relay or EAP termination