Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring the Access Control Mode of an Interface
Context
After 802.1x authentication is enabled, the device supports the following access control modes for an interface:
- MAC address-based: All 802.1x authentication users on the interface must be authenticated. If any of the users goes offline, other users still maintain access to the network. This mode applies to individual users.
- Interface-based: If one user on an interface has been authenticated successfully, other 802.1x authentication users on the same interface can access the network regardless of whether they are authenticated. However, after all authenticated users are disconnected, access of other unauthenticated users is rejected. This mode applies to group users.
This command can be configured in the system view or interface view. In the system view, the command can be configured on one or more interfaces; in the interface view, the command can only be configured on a specified interface.
Procedure
- In the system view,
- Run system-view
The system view is displayed.
- Run dot1x port-method { mac | port } interface interface-type { interface-number1 [ to interface-number2 ] } &<1-10>
The access control mode for 802.1x authentication is configured.
By default, access control for 802.1x authentication is performed based on MAC addresses.
- Run commit
The configuration is committed.
- Run system-view
- In the interface view,
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number
The interface view is displayed.
- Run dot1x port-method { mac | port }
The access control mode for 802.1x authentication is configured.
By default, access control for 802.1x authentication is performed based on MAC addresses.
- Run commit
The configuration is committed.
- Run system-view