1-14Configuring Basic 802.1x FunctionsFollow these steps to configure basic 802.1x functions:To do… Use the command… RemarksEnter system view system-view —Enable 802.1x globally dot1xRequiredBy default, 802.1x is disabledglobally.In systemview dot1x interface interface-listinterface interface-typeinterface-numberdot1xEnable802.1x forspecifiedports In port viewquitRequiredBy default, 802.1x is disabled on allports.In systemviewdot1x port-control{ authorized-force |unauthorized-force | auto }[ interface interface-list ]interface interface-typeinterface-numberdot1x port-control{ authorized-force |unauthorized-force | auto }Set portauthorizationmode forspecifiedports In port viewquitOptionalBy default, an 802.1x-enabled portoperates in the auto mode.In systemviewdot1x port-method{ macbased | portbased }[ interface interface-list ]interface interface-typeinterface-numberdot1x port-method{ macbased | portbased }Set accesscontrolmethod forspecifiedports In port viewquitOptionalThe default access control methodon a port is MAC-based (that is, themacbased keyword is used bydefault).Set authentication methodfor 802.1x usersdot1xauthentication-method{ chap | pap | eap }OptionalBy default, a switch performs CHAPauthentication in EAP terminatingmode.Enable online userhandshaking dot1x handshake enableOptionalBy default, online user handshakingis enabled.Enter Ethernet port view interface interface-typeinterface-number —Enable the handshakepacket protection function dot1x handshake secureOptionalBy default, the handshake packetprotection function is disabled.
