HP Pavilion a6600, Руководство по настройке

Страница: 96 / 501

84
Setting the port authorization state
The port authorization state determines whether the client is granted access to the network. Control the
authorization state of a port by using dot1x port-control and the following keywords:
•
authorized-force
—Places the port in the authorized state, enabling users on the port to access the
network without authentication.
•
unauthorized-force —Places the port in the unauthorized state, denying any access requests from
users on the port.
•
auto —Places the port initially in the unauthorized state to allow only EAPOL packets to pass, and
after a user passes authentication, sets the port in the authorized state to allow access to the
network. Use this option in most scenarios.
Set authorization state for one port in interface view or for multiple ports in system view. If a different
authorization state is set for a port in system view and interface view, the one set later takes effect.
To set the authorization state of a port:
To do… Command… Remarks
1. Enter system view.
system-view —
2. Set the port
authorizati
on state.
In system view
dot1x port-control { authorized-force |
auto | unauthorized-force } [ interface
interface-list ]
Optional.
Use either approach.
By default,
auto applies.
In Ethernet
interface view
interface interface-type interface-number
dot1x port-control { authorized-force |
auto | unauthorized-force }
Specifying an access control method
Specify an access control method for one port in interface view or for multiple ports in system view. If
different access control methods are specified for a port in system view and interface view, the one
specified later takes effect.
To specify the access control method:
To do… Command… Remarks
1. Enter system view.
system-view —
2. Specify an
access
control
method.
In system view
dot1x port-method { macbased |
portbased } [ interface interface-
list ]
Optional.
Use either approach.
By default, MAC-based access
control applies.
In Ethernet
interface view
interface interface-type interface-
number
dot1x port-method { macbased |
portbased }