User Manual

2 ) If the LACP port priority is the same, priority is given to the lower interface number.
If an SFP port is to be given priority, its LACP port priority must be set lower than other ports.
[Example]
Set the LACP port priority order to 1024.
SWP1(config-if)#channel-group 1 mode active
SWP1(config-if)#lacp port-priority 1024
10.3 Port authentication
10.3.1 Configuring the IEEE 802.1X authentication function for the entire system
[Syntax]
aaa authentication dot1x
no aaa authentication dot1x
[Initial value]
no aaa authentication dot1x
[Input mode]
global configuration mode
[Description]
Enables IEEE 802.1X authentication for the entire system.
If this command is executed with the "no" syntax, disables IEEE 802.1X authentication for the entire system.
Use a RADIUS server for authentication on which the radius-server host command has been configured.
[Note]
In order to actually use IEEE 802.1X authentication, you need to enable IEEE 802.1X authentication on the applicable interface
as well.(dot1x port-control command)
Since MAC authentication and IEEE 802.1X authentication are exclusive control systems, it is necessary to invalidate MAC
authentication in order to enable IEEE 802.1X authentication. (no aaa authentication auth-mac command)
[Example]
Enable IEEE 802.1X authentication for the entire system.
SWP1(config)#aaa authentication dot1x
10.3.2 Configuring the MAC authentication function for the entire system
[Syntax]
aaa authentication auth-mac
no aaa authentication auth-mac
[Initial value]
no aaa authentication auth-mac
[Input mode]
global configuration mode
[Description]
Enables MAC authentication for the entire system.
If this command is executed with the "no" syntax, disables MAC authentication for the entire system.
Use a RADIUS server for authentication on which the radius-server host command has been configured.
[Note]
In order to actually use MAC authentication, you need to enable MAC authentication on the applicable interface as well. (auth-
mac enable command)
Since MAC authentication and IEEE 802.1X authentication are exclusive control systems, it is necessary to invalidate IEEE
802.1X authentication in order to enable MAC authentication. (no aaa authentication dot1x command)
[Example]
Enable MAC authentication for the entire system.
SWP1(config)#aaa authentication auth-mac
106 | Command Reference | LAN/SFP port control