АМАТЕК AN-SGM28P24-400 [181/322] Configuring 802 x port authentication

180 / 322

The following command sets port ge1/1 to Force-authorized state in the interface

configuration mode：

Switch(config-ge1/1)dot1x control force-authorized

The following command sets port ge1/1 to Force-unauthorized state in the interface

configuration mode：

Switch(config-ge1/1)dot1x control force-unauthorized

The following command sets port ge1/1 to N/A state in the interface configuration mode：

Switch(config-ge1/1)no dot1x control

Note: if a port has bound the MAC address, then the port cannot be set to Auto,

Force-authorized or Force-unauthorized state。

11.3.4 Configuring 802.1x port authentication

You must start 802.1x before you set up the 802.1x port authentication method. If the port is

only connected to a user who needs authentication, the port is opened by authentication, and the

port must be set to portbase. If the authentication is based on the MAC address, it will be set to

macbase. The default state is macbase。

The following command sets port ge1/1 to portbase state in the interface configuration mode：

Switch(config-ge1/1)dot1x method portbase

The following command sets port ge1/1 to macbase state in the interface configuration

mode：

Switch(config-ge1/1)dot1x method macbase

11.3.5 Configuring 802.1x port guest VLAN

Before setting 802.1x port guest VLAN, you must start 802.1x, and configure ports for Auto

state and portbase state. The guest VLAN can be accessed before the authentication of the user

under the desired port. After the authentication, the configuration VLAN can be accessed, and

then the port must be configured with guest VLAN。