3Com Switch 8800 Configuration Guide Chapter 39 802.1x Configuration39-3802.1x provides an implementation solution of user ID authentication. However, 802.1xitself is not enough to implement the scheme. The administrator of the access deviceshould configure the AAA scheme by selecting RADIUS or local authentication so as toassist 802.1x to implement the user ID authentication. For detailed description of AAA,refer to the corresponding AAA configuration.39.1.4 Implementing 802.1x on Ethernet SwitchesThe Switch 8800 not only supports the port access authentication method regulated by802.1x, but also extends and optimizes it in the following way:z Support to connect several End Stations in the downstream via a physical port.z The access control (or the user authentication method) can be based on port orMAC address.In this way, the system becomes much securer and easier to manage.39.2 802.1x ConfigurationThe configuration tasks of 802.1x itself can be fulfilled in system view of the Ethernetswitch. After the global 802.1x is enabled, the user can configure the 802.1x state of theport. The configured items will take effect after the global 802.1x is enabled.Note:When 802.1x is enabled on a port, the max number of MAC address learning which isconfigured by the command mac-address max-mac-count cannot be configured onthe port, and vice versa.The following sections describe 802.1x configuration tasks.z Enabling/Disabling 802.1xz Setting the Port Access Control Modez Setting Port Access Control Methodz
