126
dot1x port-method
Use dot1x port-method to specify an access control method for the port.
Use undo dot1x port-method to restore the default.
Syntax
dot1x port-method { macbased | portbased }
undo dot1x port-method
Default
MAC-based access control applies.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
macbased: Uses MAC-based access control on the port to separately authenticate each user attempting
to access the network. Using this method, when an authenticated user logs off, no other online users are
affected.
portbased: Uses port-based access control on the port. Using this method, once an 802.1X user passes
authentication on the port, any subsequent user can access the network through the port without
authentication. When the authenticated user logs off, all other users are logged off.
Usage guidelines
To use both 802.1X and portal authentication on a port, you must specify MAC-based access control. For
information about portal authentication, see "Configuring portal authentication."
Examples
# Configure GigabitEthernet 2/1/1 to implement port-based access control.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] dot1x port-method portbased
Related commands
display dot1x
dot1x quiet-period
Use dot1x quiet-period to enable the quiet timer.
Use undo dot1x quiet-period to disable the timer.
Syntax
dot1x quiet-period
undo dot1x quiet-period