Accton Technology ES4626 - Manual (Page 789)

789
RADIUS server by PPP, the switch will use EAP local end authentication (CHAP
authentication). The switch should use different authentication methods according to the
connection between the switch and the authentication server.
Example: Setting EAP local end authentication for the switch.
Switch(Config)#no dot1x eapor enable
19.3.5 dot1x enable
Command: dot1x enable
no dot1x enable
Function:
Enables the 802.1x function in the switch and ports: the "no dot1x enable"
command disables the 802.1x function.
Command mode: Global Mode and Interface Mode.
Default: 802.1x function is not enabled in global mode by default; if 802.1x is enabled
under Global Mode, 802.1x will not be enabled for the ports by default.
Usage Guide: The 802.1x authentication for the switch must be enabled first to enable
802.1x authentication for the respective ports. If Spanning Tree or MAC binding is
enabled on the port, or the port is a Trunk port or member of port aggregation group,
802.1x function cannot be enabled for that port unless such conditions are removed.
Example: Enabling the 802.1x function of the switch and enable 802.1x for port 1/12.
Switch(Config)#dot1x enable
Switch(Config)#interface ethernet 1/12
Switch(Config-Ethernet1/12)#dot1x enable
19.3.6 dot1x macfilter enable
Command: dot1x macfilter enable
no dot1x macfilter enable
Function:
Enables the dot1x address filter function in the switch; the "no dot1x
macfilter enable " command disables the dot1x address filter function.
Command mode: Global Mode
Default: dot1x address filter is disabled by default.
Usage Guide: When dot1x address filter function is enabled, the switch will filter the
authentication user by the MAC address. Only the authentication request initialed by the
users in the dot1x address filter table will be accepted.
Example:
Enabling dot1x address filter function for the switch.
Switch(Config)#dot1x macfilter enable
19.3.7 dot1x max-req