PLANET XGS3-24042 - Manual (Page 975)

48-11
This command is used to configure the dot1x authentication method for the specified port. When port
based authentication is applied, only one host can authenticate itself through one port. And after
authentication, the host will be able to access all the resources. When MAC based authentication is
applied, multiple host which are connected to one port can access all the network resources after
authentication. When either of the above two kinds of access control is applied, un-authenticated
host cannot access any resources in the network.
When user based access control is applied, un-authenticated users can only access limited
resources of the network. The user based access control falls into two kinds – the standard access
control and the advanced access control. The standard user based access control does not limit the
access to the limited resources when the host is not authenticated yet. While the user based
advanced access control can control the access to the limited resources before authentication is
done.
Notes:
The 802.1x free resource must be configured first for standard control method based on user.
Example:
To configure the access control method based on port for Etherent1/0/4.
Switch(Config-If-Ethernet1/0/4)#dot1x port-method portbased
48.16 dot1x privateclient enable
Command:
dot1x privateclient enable
no dot1x privateclient enable
Function:
To configure the switch to force the authentication client to use private 802.1x authentication
protocol. The no prefix will disable the command and allow the authentication client to use the
standard 802.1x authentication protocol.
Command Mode:
Global Mode.
Default:
Private 802.1x authentication packet format is disabled by default.
Usage Guide:
To implement integrated solution, the switch must be enabled to use private 802.1x protocol, or
many applications will not be able to function. For detailed information, please refer to DCBI
integrated solution. If the switch forces the authentication client to use private 802.1x protocol, the
standard client will not be able to work.
Example: