802.1X Interface Settings

You can query, set, and delete 802.1x parameters of an interface.

Context

You can configure 802.1x authentication to authenticate and control access devices connected to an interface of a LAN access control device.

CAUTION:

If 802.1x authentication is enabled on an interface, MAC address authentication or direct authentication cannot be enabled on the interface. If MAC address authentication or direct authentication is enabled on an interface, 802.1x authentication cannot be enabled on the interface.

Procedure

• Query information about 802.1x parameters on an interface.
  1. Choose Security > 802.1X > 802.1X Interface Settings in the navigation tree to open the 802.1X Interface Settings page.
  2. Set the search criteria.
  3. Click Query to display all matching records.
• Set 802.1x parameters on an interface.
  1. Choose Security > 802.1X > 802.1X Interface Settings in the navigation tree to open the 802.1X Interface Settings page.
  2. Select a record and click Configure. The Configure 802.1X Interface Parameters page is displayed.

     Table 1 describes the parameters on the Configure 802.1X Interface Parameters page.

     Table 1 Configure 802.1X Interface Parameters

     Parameter	Description
     Interface Name	Indicates the name of an interface. The interface name cannot be modified. You can select multiple interfaces each time. NOTE: If only one interface is selected, the configuration of the interface is displayed on the Configure 802.1X Interface Parameters page. If multiple interfaces are selected, the default settings of the interfaces are displayed.
     Enable 802.1X	Indicates whether to enable 802.1x authentication. The options are Enable and Disable. By default, the value is Disable. NOTE: The 802.1x configuration takes effect only after 802.1x authentication is enabled globally and on an interface.
     Control Mode	Indicates the access control mode of an interface. The options are as follows: Auto Authorized-force Unauthorized-force By default, the value is Auto.
     Control Method	Indicates the access control mode of an interface: MAC Interface By default, the MAC address-based access control method is used. NOTE: If the value is Interface, only one user can access the interface. If the value is MAC, a guest VLAN can be configured but takes no effect.
     Max Number Of Users	Indicates the maximum number of access users on the specified interface. If no interface is specified, all interfaces support the same number of access users.
     802.1X Re-Authentication	Indicates whether to enable 802.1x re-authentication. The options are Enable and Disable. By default, the value is disabled.
     Guest VLAN ID	Indicates the ID of a guest VLAN. To configure a guest VLAN, select the check box before Guest VLAN ID and enter a VLAN ID. NOTE: Only one guest VLAN can be configured on the interface.

  3. Set parameters.
  4. Click OK.
• Clear the configuration of 802.1x parameters on an interface.
  1. Choose Security > 802.1X > 802.1X Interface Settings in the navigation tree to open the 802.1X Interface Settings page.
  2. Select a record and click Clear Configuration. The system asks you whether to delete the record.
  3. Click OK.