1-10z With a Hybrid port, the VLAN assignment will fail if you have configured the assigned VLAN to carrytags.z With a Hybrid port, you cannot configure an assigned VLAN to carry tags after the VLAN has beenassigned.ACL assignmentACLs provide a way of controlling access to network resources and defining access rights. When a userlogs in through a port, and the RADIUS server is configured with authorization ACLs, the device willpermit or deny data flows traversing through the port according to the authorization ACLs. Beforespecifying authorization ACLs on the server, you need to configure the ACL rules on the device. Youcan change the access rights of users by modifying authorization ACL settings on the RADIUS server orchanging the corresponding ACL rules on the device.Configuring 802.1XConfiguration Task List802.1X provides a method for implementing user identity authentication. However, 802.1X cannotimplement the authentication method solely by itself. RADIUS or local authentication must beconfigured to work with 802.1X. Therefore, before the 802.1X configuration, you need to configure thefollowing:z Configure the ISP domain to which the 802.1X user belongs and the AAA method to be used (thatis, local authentication or RADIUS authentication.z For remote RADIUS authentication, the username and password information must be configuredon the RADIUS server.z For local authentication, the username and password information must be configured on the deviceand the service type must be set to LAN-access.Table 1-2 lists the 802.1X configuration procedure.Table 1-2 802.1X configuration procedureTask DescriptionConfiguring 802.1X GloballyRequiredEnable 802.1X authentication globally and configure theauthentication method and advanced parameters.By default, 802.1X authentication is disabled globally.Configuring 802.1X on a PortRequiredEnable 802.1X authentication on specified ports and configure802.1X parameters for the ports.By default, 802.1X authentication is disabled on a port.
