118
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/4
[Sysname-GigabitEthernet3/0/4] dot1x handshake secure
Related commands
dot1x handshake
dot1x mandatory-domain
Use
dot1x mandatory-domain
to specify a mandatory 802.1X authentication domain on a port.
Use
undo dot1x mandatory-domain
to remove the mandatory authentication domain.
Syntax
dot1x mandatory-domain
domain-name
undo dot1x
mandatory-domain
Default
No mandatory authentication domain is specified.
Views
Ethernet interface view
Default command level
2: System level
Parameters
domain-name
: Specifies the ISP domain name, a case-insensitive string of 1 to 24 characters.
Usage guidelines
When authenticating an 802.1X user trying to access the port, the system selects an authentication
domain in the following order: the mandatory domain, the ISP domain specified in the username, and
the default ISP domain.
To display or cut all 802.1X connections in a mandatory domain, use the
display connection
domain
isp-name
or
cut connection domain
isp-name
command. The output from the
display
connection
command without any parameters displays domain names entered by users at login.
For more information about the
display connection
command or the
cut connection
command,
see "AAA configuration commands."
Examples
# Configure the mandatory authentication domain
my-domain
for 802.1X users on GigabitEthernet
3/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] dot1x mandatory-domain my-domain
# After 802.1X user
usera
passes the authentication, execute the
display connection
command to
display the user connection information on GigabitEthernet 3/0/1. For more information about the
display connection
command, see "AAA configuration commands."
[Sysname-GigabitEthernet3/0/1] display connection interface gigabitethernet 3/0/1
Index=68 ,Username=usera@my-domian
MAC=0015-e9a6-7cfe
IP=3.3.3.3
IPv6=N/A
