1-15To do… Use the command… RemarksEnter system view system-view —Enter Ethernet interface view interface interface-typeinterface-number —Specify the port authorizationmode for the portdot1x port-control{ authorized-force | auto |unauthorized-force }Optionalauto by defaultSpecify the port access controlmethod for the portdot1x port-method{ macbased | portbased }Optionalmacbased by defaultSet the maximum number ofusers for the port dot1x max-user user-number Optional256 by defaultNote that:z Enabling 802.1X on a port is mutually exclusive with adding the port to an aggregation group.z For a user-side device sending untagged traffic, the voice VLAN function and 802.1X are mutuallyexclusive and cannot be configured together on the same port. For details about voice VLAN, referto VLAN Configuration.z In EAP relay authentication mode, the device encapsulates the 802.1X user information in the EAPattributes of RADIUS packets and sends the packets to the RADIUS server for authentication. Inthis case, you can configure the user-name-format command but it does not take effect. Forinformation about the user-name-format command, refer to AAA Commands.z If the username of a client contains the version number or one or more blank spaces, you canneither retrieve information nor disconnect the client by using the username. However, you can useitems such as IP address and connection index number to do so.Enabling the Online User Handshake FunctionThe online user handshake function allows the device to send handshake messages to online users tocheck whether the users are still online at the interval specified by the dot1x timer handshake-periodcommand. If the device does not receive any response from an online user after the device has sent thehandshake packet for the maximum number of times, which is set by the dot1x retry command, thedevice will set the user state to offline.Follow these steps to configure the online user handshake function:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet interface view interface interface-typeinterface-number —Enable the online handshakefunction dot1x handshake OptionalEnabled by default
