D-Link DXS-3600-EM-8T CLI Guide - Page 15

DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to deny all access to port 1. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x port-control force-unauthorized DXS-3600-32S(config-if)# 2-3 dot1x pae authenticator This command is used to configure a specific port as an IEEE 802.1X port access entity (PAE) authenticator. Use the no form of this command to disable IEEE 802.1X authentication on the port. dot1x pae authenticator no dot1x pae Parameters Default Command Mode Command Default Level Usage Guideline None. The 802.1X is disabled on a port by default. Interface Configuration Mode. Level: 8 You must also globally enable IEEE 802.1X authentication on the switch by using the 'dot1x system-auth-control' command. Example This example shows how to configure port 1 as an IEEE 802.1X PAE authenticator. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x pae authenticator DXS-3600-32S(config-if)# 2-4 dot1x control-direction This command is used to configure the direction of the traffic on a controlled port as unidirectional (in) or bidirectional (both). Use the no form of this command to reset the control direction of a port to its default value (both). dot1x control-direction {both | in} no dot1x control-direction Parameters both in Specifies to enable bidirectional control. Both incoming and outgoing traffic through an IEEE 802.1X-enabled port are prevented if the port is not in the authorized state. Specifies to enable unidirectional control. Incoming traffic through an IEEE 802.1Xenabled port is prohibited if the port is not the authorized state. Default Command Mode Command Default Level The default is in bidirectional mode. Interface Configuration Mode. Level: 8 7