TP-Link T1600G-18TSTL-SG2216 T1600G-18TSUN V1 Configuration Guide - Page 606

Configuring Network Security 802.1X Configuration Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 interface {fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list} Enter interface configuration mode. port: Enter the ID of the port to be configured. dot1x Enable 802.1X authentication for the port. dot1x port-method { mac-based | port-based } Configure the control type for the port. By default, it is mac-based. mac-based: All clients connected to the port need to be authenticated. port-based: If a client connected to the port is authenticated, other clients can access the LAN without authentication. dot1x guest-vlan (Optional) Enable guest VLAN on the port. Note: Before enabling guest VLAN, the control type of the port should be configured as port-based. dot1x port-control { auto | authorized-force | unauthorized-force } Configure the control mode for the port. By default, it is auto. auto: If this option is selected, the port can access the network only when it is authenticated. authorized-force: If this option is selected, the port can access the network without authentication. unauthorized-force: If this option is selected, the port can never be authenticated. show dot1x interface [fastEthernet port |gigabitEthernet port | ten-gigabitEthernet port] (Optional) Verify the configurations of 802.1X authentication on the port. port: Enter the ID of the port to be configured. If no specific port is entered, the switch will show configurations of all ports. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to enable 802.1X authentication on port 1/0/2, configure the control type as port-based, and configure the control mode as auto: Switch#configure Configuration Guide 583