Installation manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1
802.1x Configuration
Huawei Technologies Proprietary
1-4
thentication request message retransmission
ry, otherwise 802.1x will not take any
t
1.2.1 Ena
mmand can be used to enable/disable the 802.1x on the specified port
or globally. When it is used in system view, if the parameter interface-list is not specified,
. If the parameter interface-list is specified, 802.1x will be
enabled on the specified port. When this command is used in Ethernet port view, the
z Configuring 802.1x dynamic user binding
z Setting the maximum times of au
z Configuring timers
z Enabling/disabling a quiet-period timer
Among the above tasks, the first one is compulso
effect. The other tasks are optional. You can perform the configurations a
requirements.
bling/Disabling 802.1x
The following co
802.1x will be globally enabled
parameter interface-list cannot be input and 802.1x can only be enabled on the current
port.
Perform the following configurations in system view or Ethernet port view.
Table 1-1 Enabling/disabling 802.1x
Operation Command
Enable the 802.1x dot1x [ interface interface-list ]
Disable the 802.1x undo dot1x [ interface interface-list ]
You can config on individual port before i globally. The
c effect right after 802.1
By default, 802.1x authentication has not be
1.2.2 Setting the Port Access Control Mode.
ontrol mode on the
specified port. When no port is specified, the access control mode of all ports is
view or Ethernet port view.
Table 1-2 Setting the port access control mode.
ure 802.1x t is enabled
onfiguration will take x is enabled globally.
en enabled globally and on any port.
The following commands can be used for setting 802.1x access c
configured.
Perform the following configurations in system
Operation Command
Set the port
dot1x port-control { authorized- force
access control mode.
| unauthorized-force | auto }
[ interface interface-list ]
Restore the default access control mode
of the port.
undo dot1x port-control [ interface
interface-list ]