D-Link DGS-6600-48TS Configuration Guide - Page 439

Volume 8-Security & Authentication / Chapter 40-802.1X Authentication 802.1X Configuration Commands Specifying the Access Control Mode The following command sets the port to operate in either port-based mode or host-based mode: Command Explanation dot1x auth-mode {port-based | host-based} Specifies the authentication mode of the specified interface. In the following example, the user configures Ethernet interface 4.10 to use 802.1X port-based authentication: DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#interface eth4.10 DGS-6600:15(config-if)#dot1x auth-mode port-based DGS-6600:15(config-if)#end Specifying the Port Control Direction The Switch allows the user to specify the direction of traffic that must be prevented from passing through an 802.1X controlled port. One option that the user can configure specifies that only incoming traffic will be prevented from passing through an 802.1X controlled port. The other option specifies that both incoming and outgoing traffic will be prevented from passing through an 802.1X controlled port. Enter the following command to specify if the traffic for a controlled port should be prevented in both the inbound and outbound direction or only for the inbound direction: Command dot1x control-direction {both | in} Explanation Specifies if the traffic for the controlled port should be prevented in both the inbound and outbound direction or only for the inbound direction. In the following example, the user specifies that traffic for the controlled port Ethernet interface 4.43 should only be prevented in the inbound direction: DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#interface eth4.43 DGS-6600:15(config-if)#dot1x control-direction in DGS-6600:15(config-if)#end DGS-6600 Configuration Guide 439