set protocols dot1x interface port-control

The set protocols dot1x interface port-control command configures the port control mode.

Command Syntax

set protocols dot1x interface <interface-name> port-control <auto | force-authorized | force-unauthorized>

Parameter

Parameter

Description

interface <interface-name>

Specifies the physical interface name. The value is a string.

port-control <auto | force-authorized | force-unauthorized>

Specifies the port control mode. The value could be auto, force-authorized or force-unauthorized.

auto: The initial state of the interface is un-authorized. Only the EAPOL packets are allowed to be sent and received. The user is not allowed to access the network resources. After a user passes the authentication, the interface turns to authorized state and the user is allowed to access the network resources in this state.
force-authorized: The interface is always in Authorized state and allows users to access network resources without authentication.
force-unauthorized: The interface is always in Un-authorized state and does not allow users to access network resources.

By default, the port control mode is auto.

Usage Guidelines

By default, the port control mode is auto. The client is allowed to access the network through the port only after successful authentication. To trust all users on an interface without authentication, configure the force-authorized mode. To disable access rights of all users on an interface to ensure security, configure the force-unauthorized mode.

Example

Configure the port control mode on interface ge-1/1/1 to force-authorized.

admin@Xorplus# set protocols do1x interface ge-1/1/1 port-control force-authorized
admin@Xorplus# commit