Setting the port authorization state

The port authorization state determines whether the client is granted access to the network. You can control the authorization state of a port by using the dot1x port-control command and the following keywords:

You can set the authorization state for one port in Layer 2 Ethernet interface view or for multiple ports in system view. If different authorization states are set for a port in system view and Layer 2 Ethernet interface view, the one set later takes effect.

To set the authorization state of a port:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Set the port authorization state.

  • (Approach 1) In system view:dot1x port-control { authorized-force | auto | unauthorized-force } [ interface interface-list ]

  • (Approach 2) In Layer 2 Ethernet interface view:

    1. interface interface-type interface-number

    2. dot1x port-control { authorized-force | auto | unauthorized-force }

Use either approach.

By default, auto applies.