Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-37
4.2.29 Configuring Port-based
Authentication
The 802.1x controls users on the basis of their MAC addresses by default. Only the
authenticated user can use the network. With port-based authentication, the port is
authenticated as long as a user is authenticated on a port. Consequently, all users connecting
to this port can access the network.
To configure port-based control mode, execute the following commands in the privileged
mode.
Command Function
configure terminal
Enter the global configuration mode.
interface <interface-id>
Enter the interface mode
dot1x port-control auto
Enable the function being controlled.
dot1x port-control-mode
{mac-based|port-based}
Select the controlled mode.
end
Return to the privileged mode.
write
Save the configuration.
show dot1x port-control
Show the configuration of port 802.1X.
You can run no dot1x port-control-mode to restore the settings to the default control mode.
Following example shows how to configure the authentication mode of a port.
DES-7200(config)#
DES-7200# configure terminal
DES-7200(config)# interface gigabitEthernet 4/5
DES-7200(config-if)# dot1x port-control-mode port-base
Caution
In the port-based authentication mode, a port can be connected with only one
authenticated user.
Port-based authentication mode can enable or disable dynamic users to migrate among
multiple authenticated ports. By default, the migration is allowed. To prohibit the migration, run
the following commands one by one in the privileged mode.
Command Function
configure terminal
Enter the global configuration mode.
dot1x stationarity enable
Disable the migration among ports.
end
Exit to the privileged mode.
write
Save the configuration.