Ruijie Networks RG-S2600E Series, Справочное руководство CLI

Страница: 582 / 1191

S2600E CLI Reference Guide Chapter 4 802.1X Configuration Commands
4.5.20 dot1x port-control-mode
By default, 802.1x adopts MAC address-based control mode. In this mode, only authenticated
users have access to the network, while other users that connect to the same port cannot
access the network. In the port-based control mode, however, if one user that connects to the
port passes the authentication, this port becomes an authenticated port and all the users that
connect to this port have access to the network. In the port-based single-user control mode,
the port is authenticated when it allows only one authenticated user who is enable to use the
network normally. If you find other users on the port, you should clear all the users on the port
and reauthenticate.The authentication mode can be configured using the following commands:
dot1x port-control-mode { mac-based | { port-based [single-host]} }
no dot1x port-control-mode
Parameter Description
mac-based Enable the MAC address-based control.
port-based Enable port-based control.
Parameter
description
single-host Enable singlehost-based control.
Default MAC address-based access control is used by default.
Command
mode Interface configuration mode.
Usage
guidelines
Use the show dot1x port-control command to show the
802.1X configuration for the port.
Single-host is port-based single-user 802.1x access
control. Use show dot1x port-control to display
port-based and use show running-config to display dot1x
port-control-mode port-based single-host.
Since single-host only supports the single-user form,
setting default-user-limit on the port manually does not
take effect in single-host mode. If you set default-user-limit
on the port after setting single-host, only one user can be
permitted to use the network still.
Examples
The following example sets the port to participate in
authentication and enable port-based authentication:
Ruijie(config)# interface g0/1
Ruijie(config-if)# dot1x port-control auto