SNR S2940-8G-v2, Configuration Manual

Page: 317 / 420

SNR S2940-8G-v2 Switch Configuration Guide
802.1x Configuration
2. Access management unit property configuration
(a) Configure port authentication status
Command Explanation
Port Mode
dot1x port-control { auto | force-authorized |
force-unauthorized }
no dot1x port-control Sets the 802.1x authentication mode; the
no command restores the default setting.
(b) Configure port access management method
Command Explanation
Port Mode
dot1x port-method { macbased | portbased | user-
based { standard | advanced } }
no dot1x port-method Sets the port access management method;
the no command restores MAC-based ac-
cess management.
dot1x max-user macbased <number>
no dot1x max-user macbased Sets the maximum number of access users
for the specified port; the no command re-
stores the default setting of allowing 1 user.
dot1x max-user userbased <number>
no dot1x max-user userbased Set the upper limit of the number of users
allowed accessing the specified port, only
used when the access control mode of the
port is userbased; the no command is used
to reset the limit to 10 by default.
dot1x guest-vlan <vlanID>
no dot1x guest-vlan Set the guest vlan of the specified port; the
no command is used to delete the guest
vlan.
dot1x portbased mode single-mode
no dot1x portbased mode single-mode Set the single-mode based on portbase au-
thentication mode; the no command dis-
ables this function.
(c) Configure expanded 802.1x function
Command Explanation
Global Mode
dot1x macfilter enable
no dot1x macfilter enable Enables the 802.1x address filter function
in the switch; the no command disables the
802.1x address filter function.
dot1x macbased port-down-flush
no dot1x macbased port-down-flush Enables this command, when the dot1x cer-
tification according to mac is down, delete
the user who passed the certification of the
port; The no command does not make the
down operation.
dot1x accept-mac <mac-address> [ interface
<interface-name> ]
no dot1x accept-mac <mac-address> [ interface
<interface-name> ] Adds 802.1x address filter table entry, the
no command deletes 802.1x filter address
table entries.
317