Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
authorized-force: Places the port in the authorized state, enabling users on the port to access the network
without authentication.
auto: Places the port initially in the unauthorized state to allow only EAPOL packets to pass, and after a
user passes authentication, sets the port in the authorized state to allow access to the network. You can
use this option in most scenarios.
unauthorized-force: Places the port in the unauthorized state, denying any access requests from users on
the port.
Usage guidelines
You can use this command to set the port authorization state to determine whether a client is granted
access to the network.
Examples
# Set the authorization state of port Ten-GigabitEthernet 1/0/1 to unauthorized-force.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x port-control unauthorized-force
Related commands
display dot1x
dot1x port-method
Use dot1x port-method to specify an access control method for the port.
Use undo dot1x port-method to restore the default.
Syntax
dot1x port-method { macbased | portbased }
undo dot1x port-method
Default
MAC-based access control applies.
Views
Ethernet interface view
Predefined user roles
network-admin
101