Installation manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1
802.1x Configuration
Huawei Technologies Proprietary
1-8
able 1-8 Enabling/disabling Guest VLAN T
Operation Command
Enabling Guest VLAN dot1x guest-vlan vlan-id [ interface interface-list ]
Disabling Guest VLAN undo dot1x guest-vlan vlan-id [ interface interface-list ]
Note the following:
z Guest VLAN is only supported in the port-based authentication mode.
z A switch only can be configured with one Guest VLAN.
z Users who skip the authentication, fail in the authentication or get offline belong to
the Guest VLAN.
If dot1x dhcp-launch is configured on the switch, the Guest VLAN function cannot be
implemented because the switch does not send active authentication packet in this
mode.
1.2.9 Setting 802.1x Re-authentication
If the termination-action attribute on the RADIUS serv the server then sets
the term n attribute in the access-acce ich is sent to the switch
to ntic f
p
ou can also enable 802.1x re-authentication on the switch through this configuration,
making the switch re-authenticates the access users periodically.
I. Enabling 80
le the 802.1x feature both
Perf system view or Ethernet port view.
er is set to 1,
pt packet wh
ination-actio
1. The switch re-authe ates the access user periodically after receiving this kind o
ackets.
Y
2.1x re-authentication
Before enabling the 802.1x re-authentication, you must enab
on the port and globally.
orm the following in
Table 1-9 Enabling/disabling 802.1x user re-authentication
Operation Command
Enable 802.1x user re-authentication
dot1x re-authenticate [ interface
interface-list ]
Disable 802.1x user re-authentication
undo dot1x re-authenticate [ interface
interface-list ]
By default, 802.1x re-authentication is disabled on all ports.
In system view, if the interface-list parameter is not specified, it means that to enable
et
the 802.1x re-authentication feature on all interfaces; if the interface-list parameter is
specified, it means that to enable the feature on the specified interfaces. In Ethern