access-authentication (security policy rule view)

Function

The access-authentication command sets an access mode for a security policy rule.

The undo access-authentication command cancels the setting.

Format

access-authentication { wired-802.1x | wireless-802.1x | wired-portal | wireless-portal | any }

undo access-authentication { wired-802.1x | wireless-802.1x | wired-portal | wireless-portal }

Parameters

Parameter	Description	Value
wired-802.1x	Indicates the client access mode that supports 802.1X authentication in case of a wired connection.	-
wireless-802.1x	Indicates the client access mode that supports 802.1X authentication in case of a wireless connection.	-
wired-portal	Indicates portal-based access mode in case of a wired connection.	-
wireless-portal	Indicates the portal-based access mode in case of a wireless connection.	-
any	Indicates any access mode.	-

Views

Security policy rule view

Default Level

2: Configuration level

Usage Guidelines

Setting an access mode for a security policy rule allows you to implement policy control for different types of access authentication in Agile Controller SSO scenarios

Example

# Configure security policy policy_sec to allow only devices whose access mode is wired-802.1x.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security] rule name policy_sec
[sysname-policy-security-rule-policy_sec] access-authentication wired-802.1x
[sysname-policy-security-rule-policy_sec] action permit