TP-Link T1500-28TC TL-SL2428 T1500-28TCUN V1 Configuration Guide - Page 456

Configuring Network Security 802.1X Configuration Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 dot1x port-method { mac-based | port-based } Configure the control type for the port. By default, it is mac-based. mac-based: All clients connected to the port need to be authenticated. port-based: If a client connected to the port is authenticated, other clients can access the LAN without authentication. dot1x guest-vlan (Optional) Enable guest VLAN on the port. Note: Before enabling guest VLAN, the control type of the port should be configured as port-based. dot1x port-control { auto | authorized-force | unauthorized-force } Configure the control mode for the port. By default, it is auto. auto: If this option is selected, the port can access the network only when it is authenticated. authorized-force: If this option is selected, the port can access the network without authentication. unauthorized-force: If this option is selected, the port can never be authenticated. show dot1x interface [fastEthernet port |gigabitEthernet port ] (Optional) Verify the configurations of 802.1X authentication on the port. port: Enter the ID of the port to be configured. If no specific port is entered, the switch will show configurations of all ports. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to enable 802.1X authentication on port 1/0/2, configure the control type as port-based, and configure the control mode as auto: Switch#configure Switch(config)#interface fastEthernet 1/0/2 Switch(config-if)#dot1x Switch(config-if)#dot1x port-method port-based Switch(config-if)#dot1x port-control auto Switch(config-if)#show dot1x interface fastEthernet 1/0/2 Configuration Guide 435