Predefined user roles
network-admin
Usage guidelines
The online user handshake function enables the device to periodically (set with the dot1x timer
handshake-period command) send handshake messages to the client to verify the connectivity status of
online 802.1X users. If no response is received from an online user after the maximum number of
handshake attempts (set by the dot1x retry command) has been made, the network access device sets
the user in the offline state.
Examples
# Enable the online user handshake function on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x handshake
Related commands
• display dot1x
• dot1x timer handshake-period
• dot1x retry
dot1x mandatory-domain
Use dot1x mandatory-domain to specify a mandatory 802.1X authentication domain on a port.
Use undo dot1x mandatory-domain to remove the mandatory authentication domain.
Syntax
dot1x mandatory-domain domain-name
undo dot1x mandatory-domain
Default
No mandatory authentication domain is specified.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
domain-name: Specifies the ISP domain name, a case-insensitive string of 1 to 24 characters.
Usage guidelines
When authenticating an 802.1X user trying to access a port, the system selects an authentication domain
in the following order: the mandatory domain, the ISP domain specified in the username, and the default
ISP domain.
98
To Next Page
Loading...
Need help?
General
