1-5
Parameters
interface-list
: Ethernet port list, in the form of
interface-list=
{
interface-type interface-number
[
to
interface-type interface-number
] } &<1-10>, in which
interface-type
specifies the type of an Ethernet
port and
interface-number
is the number of the port. The string “&<1-10>” means that up to 10 port lists
can be provided.
Description
Use the
dot1x
command to enable 802.1x globally or for specified Ethernet ports.
Use the
undo dot1x
command to disable 802.1x globally or for specified Ethernet ports.
By default, 802.1x is disabled globally and also on all ports.
In system view:
z
If you do not provide the
interface-list
argument, the
dot1x
command enables 802.1x globally.
z
If you specify the
interface-list
argument, the
dot1x
command enables 802.1x for the specified
Ethernet ports.
In Ethernet port view, the
interface-list
argument is not available and the command enables 802.1x for
only the current Ethernet port.
802.1x-related configurations take effect on a port only after 802.1x is enabled both globally and on the
port.
z
The settings of 802.1x and MAC address learning limit are mutually exclusive. Enabling 802.1x on
a port will prevent you from setting the limit on MAC address learning on the port and vice versa.
z
The settings of 802.1x and aggregation group member are mutually exclusive. Enabling 802.1x on
a port will prevent you from adding the port to an aggregation group and vice versa.
Related commands:
display dot1x
.
Examples
# Enable 802.1x for Ethernet 1/0/1.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x interface Ethernet 1/0/1
# Enable 802.1x globally.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x
dot1x authentication-method
Syntax
dot1x authentication-method
{
chap | pap | eap
}