802.1x Configuration
427
3) Configure expanded 802.1x function
Command
Explanation
Global Mode
dot1x macfilter enable
no dot1x macfilter enable
Enables the 802.1x address filter function in the switch;
the no command disables the 802.1x address filter
function.
dot1x
accept-mac
<
mac-address
>
[interface
<
interface-name
> ]
no
dot1x
accept-mac
<
mac-address
>
[interface
<
interface-name
> ]
Adds 802.1x address filter table entry, the no command
deletes 802.1x filter address table entries.
dot1x eapor enable
no dot1x eapor enable
Enables the EAP relay authentication function in the
switch; the no command sets EAP local end
authentication.
Command
Explanation
Port Mode
dot1x
port-method
{macbased
|
portbased | userbased {standard |
advanced}}
no dot1x port-method
Sets the port access management
method; the no command restores
MAC-based access management.
dot1x max-user macbased
<number>
no dot1x max-user macbased
Sets the maximum number of access
users for the specified port; the no
command restores the default setting of
allowing 1 user.
dot1x max-user userbased
<
number
>
no dot1x max-user userbased
Set the upper limit of the number of users
allowed accessing the specified port, only
used when the access control mode of the
port is userbased; the no command is
used to reset the limit to 10 by default.
dot1x guest-vlan
<vlanID>
no dot1x guest-vlan
Set the guest vlan of the specified port;
the no command is used to delete the
guest vlan.
dot1x portbased mode single-mode
no dot1x portbased mode single-mode
Set the single-mode based on portbase
authentication mode; the no command
disables this function.