User Manual

10.3.3 Set operation mode for the IEEE 802.1X authentication function
[Syntax]
dot1x port-control mode
no dot1x port-control
[Parameter]
mode : Operation mode for IEEE 802.1X authentication
Operation mode Description
auto
Operates as an authenticator for IEEE 802.1X
authentication
force-authorized
Sets the authenticated port for IEEE 802.1X
authentication to a fixed port
force-unauthorized
Sets the unauthenticated port for IEEE 802.1X
authentication to a fixed port
[Initial value]
no dot1x port-control
[Input mode]
interface mode
[Description]
Configures the IEEE 802.1X authentication operation mode for the applicable interface.
If this command is executed with the "no" syntax, the IEEE 802.1X authentication function will be disabled for the applicable
interface.
[Note]
This command can be specified only for LAN/SFP port.
[Example]
This command can be specified only for LAN/SFP port.
SWP1(config)#interface ge1
SWP1(config-if)#dot1x port-control auto
10.3.4 Set for forwarding control on an unauthenticated port for IEEE 802.1X authentication
[Syntax]
dot1x control-direction direction
no dot1x control-direction
[Parameter]
direction : Sets the packet forwarding operation for unauthenticated ports
Forwarding operation Description
both Both send and receive packets are discarded.
in Only receive packets are discarded.
[Initial value]
dot1x control-direction both
[Input mode]
interface mode
[Description]
Changes the packet forwarding operation for the applicable interface when the IEEE 802.1X authentication is unauthenticated.
If this command is executed with the "no" syntax, the setting returns to the default.
When "both" is specified, the packets received from the supplicant are discarded, and the broadcast/multicast packets to the
interface to which the supplicant is connected from other ports are also discarded.
Command Reference | LAN/SFP port control | 107