Ruijie RG-S2900G-E Series, Configuration Manual

Page: 546 / 943

Configuration Guide 802.1x Configuration
mac-addr interface interface
Ruijie# show dot1x auth-address-table Show the list of the hosts that can be authenticated.
Use the no dot1x auth-address-table address command to delete the specified authenticable host list. The following
example shows the list of the hosts that can be authenticated.
Ruijie# show dot1x auth-address-table
interface:g3/1
-----------------------------------
mac addr: 00D0.F800.0001
Viewing the User Authentication Status Information
The administrator can view the authentication status of the current users of the switch for easier troubleshooting.
In the privileged EXEC mode, you can view the user authentication status information by performing the following steps:
Command Function
show dot1x summary Viewing the User Authentication Status Information
The following example shows the user authentication status information.
Ruijie# show dot1x summary
ID MAC Interface VLAN Auth-State Backend-State Port-Status
---- ----------- --------- ---- ---------- ------------ -----------
1 00d0f8000001 Gi3/1 1 Authenticated IDLE Authed
Showing the 1x Client Probe Timer Configuration
In the privileged EXEC mode, you can view the 1x timer setting by performing the following steps:
Command Function
show dot1x probe-timer
Show the 1X timer setting
The following example shows the 1.1x timer setting:
Ruijie# show dot1x probe-timer
Hello Interval: 20 Seconds
Hello Alive: 250 Seconds
Example of Configuring 802.1X port-based dynamic VLAN assignment
In a school, there are three types of user groups as shown below:

Students;

Trusted students (such as student cadres);

Teaching and administrative staff.
Fundamental requirements are shown below:

Each member of these three user groups can be connected to any port of the access device and join the
corresponding VLAN.