Operation Manual – 802.1x and System GuardH3C S5600 Series Ethernet Switches Chapter 1 802.1x Configuration1-161.3 Basic 802.1x Configuration1.3.1 Configuration Prerequisitesz Configure ISP domain and the AAA scheme to be adopted. You can specify aRADIUS scheme or a local scheme.z Ensure that the service type is configured as lan-access (by using theservice-type command) if local authentication scheme is adopted.1.3.2 Configuring Basic 802.1x FunctionsFollow these steps to configure basic 802.1x functions:To do… Use the command… RemarksEnter system view system-view —Enable 802.1x globally dot1xRequiredBy default, 802.1x is disabledglobally.In systemviewdot1x interfaceinterface-listinterface interface-typeinterface-numberdot1xEnable802.1x forspecifiedports In portviewquitRequiredBy default, 802.1x is disabledon all ports.In systemviewdot1x port-control{ authorized-force |unauthorized-force |auto } [ interfaceinterface-list ]interface interface-typeinterface-numberdot1x port-control{ authorized-force |unauthorized-force |auto }Set portaccesscontrolmode forspecifiedports In portviewquitOptionalBy default, an 802.1x-enabledport operates in the automode.dot1x port-method{ macbased |portbased } [ interfaceinterface-list ]Set portaccessmethod forspecifiedportsinterface interface-typeinterface-numberOptionalThe default port accessmethod isMAC-address-based (that is,the macbased keyword isused by default).
