Operation Manual – 802.1x-System GuardH3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration1-151.3 Basic 802.1x Configuration1.3.1 Configuration Prerequisitesz Configure ISP domain and the AAA scheme to be adopted. You can specify aRADIUS scheme or a local scheme.z Ensure that the service type is configured as lan-access (by using theservice-type command) if local authentication scheme is adopted.1.3.2 Configuring Basic 802.1x FunctionsTable 1-1 Configure basic 802.1x functionsOperation Command RemarksEnter system view system-view —Enable 802.1xglobally dot1xRequiredBy default, 802.1x is disabledglobally.Insystemviewdot1x interface interface-listinterface interface-typeinterface-numberdot1xEnable802.1xforspecified ports In portviewquitRequiredBy default, 802.1x is disabledon all ports.Insystemviewdot1x port-control{ authorized-force |unauthorized-force | auto }[ interface interface-list ]interface interface-typeinterface-numberdot1x port-control{ authorized-force |unauthorized-force | auto }Set portaccesscontrolmodeforspecified portsIn portviewquitOptionalBy default, an 802.1x-enabledport operates in the automode.Insystemviewdot1x port-method{ macbased | portbased }[ interface interface-list ]interface interface-typeinterface-numberdot1x port-method{ macbased | portbased }Set portaccessmethodforspecified portsIn portviewquitOptionalThe default port accessmethod isMAC-address-based (that is,the macbased keyword isused by default).
