Command Manual (For Soliton) – 802.1x-System GuardH3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration Commands1-141.1.10 dot1x port-methodSyntaxdot1x port-method { macbased | portbased } [ interface interface-list ]undo dot1x port-method [ interface interface-list ]ViewSystem view, Ethernet port viewParametermacbased: Performs MAC address-based authentication.portbased: Performs port-based authentication.interface-list: Ethernet port list, in the form of interface-list= { interface-typeinterface-number [ to interface-type interface-number ] } &<1-10>, in whichinterface-type specifies the type of an Ethernet port and interface-number is thenumber of the port. The string “&<1-10>” means that up to 10 port lists can be provided.DescriptionUse the dot1x port-method command to specify the access control method forspecified Ethernet ports.Use the undo dot1x port-method command to revert to the default access controlmethod.By default, the access control method is macbased.This command specifies the way in which the users are authenticated.z If you specify to authenticate users by MAC addresses (that is, executing thedot1x port-method command with the macbased keyword specified), all theusers connected to the specified Ethernet ports are authenticated separately. Andif an online user logs off, others are not affected.z If you specify to authenticate supplicant systems by port numbers (that is,executing the dot1x port-method command with the portbased keywordspecified), all the users connected to a specified Ethernet port are able to accessthe network without being authenticated if a user among them passes theauthentication. And when the user logs off, the network is inaccessible to all othersupplicant systems either.z Changing the access control method on a port by the dot1x port-method commandwill forcibly log out the online 802.1x users on the port.In system view:z If you do not provide the interface-list argument, these two commands apply to allthe ports of the switch.
