Configuring an 802.1X critical VSI

You can configure only one 802.1X critical VSI on a port. The 802.1X critical VSIs on different ports can be different.

Before you configure the 802.1X critical VSI on an 802.1X-enabled port, complete the following tasks:

• Enable L2VPN.

• Create the VSI to be specified as the 802.1X critical VSI, and create a VXLAN for the VSI.

• Enable MAC-based traffic matching for dynamic Ethernet service instances on the port if the port performs MAC-based access control.

For more information, see VXLAN Configuration Guide.

1. Enter system view.

   system-view

2. Enter interface view.

   interface interface-type interface-number

3. Configure the 802.1X critical VSI on the port.

   dot1x critical vsi critical-vsi-name

   By default, no 802.1X critical VSI exists on a port.