2.
Run:
dot1x port-method
{
mac
|
port
}
interface
{
interface-type
interface-
number1
[
to
interface-number2
] } &<1-10>
The access method is configured on an interface.
By default, an interface uses the MAC address-based access method.
l
Setting the access method on an interface in the interface view
1.
Run:
system-view
The system view is displayed.
2.
Run:
interface
interface-type
interface-number
The interface view is displayed.
3.
Run:
dot1x port-method
{
mac
|
port
}
The access method is configured on the interface.
By default, an interface uses the MAC address-based access method.
----End
5.3.7 (Optional) Configuring the Authorization Status of an
Interface
The AR1200-S supports the
auto
,
authorized-force
, and
unauthorized-force
modes.
Context
auto
: An interface is initially in unauthorized state and sends and receives only EAPoL packets.
Therefore, users cannot access network resources. After a user is authenticated on the interface,
the interface enters the authorized state and allows users to access network resources.
authorized-force
: An interface is always in authorized state and allows users to access network
resources without authentication.
unauthorized-force
: An interface is always in unauthorized state and does not allow users to
access network resources.
The authorization status of an interface can be configured in the system view or interface view.
Procedure
l
Setting the authorization status of an interface in the system view
1.
Run:
system-view
The system view is displayed.
2.
Run:
dot1x port-control
{
auto
|
authorized-force
|
unauthorized-force
}
interface
{
interface-type
interface-number1
[
to
interface-number2
] }
&<1-10>
The authorization status of an interface is configured.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
5 NAC Configuration
Issue 02 (2012-03-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
104