Installation manual

Command Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-5
Description
Using dot1x dhcp-launch command, you can set 802.1x to disable the switch to
trigger the user ID authentication over the users who configure static IP addresses in
DHCP environment. Using undo dot1x dhcp-launch command, you can set 802.1x to
enable the switch to trigger the authentication over them.
By default, the switch can trigger the user ID authentication over the users who
configure static IP addresses in DHCP environment.
For the related command, see dot1x.
Example
# Disable the switch to trigger the authentication over the users who configure static IP
addresses in DHCP environment.
[Quidway] dot1x dhcp-launch
1.1.5 dot1x dynamic-binding-user enable
Syntax
dot1x dynamic-binding-user enable
undo dot1x dynamic-binding-user enable
View
System view
Parameter
None
Description
Use the dot1x dynamic-binding-user enable command to enable 802.1x dynamic
user binding.
Use the undo dot1x dynamic-binding-user enable command to disable 802.1x
dynamic user binding.
802.1x dynamic user binding is disabled by default.
802.1x dynamic user binding enables a switch to dynamically bind the IP address, the
MAC address, the accessing port, and the VLAN to which the accessing port belongs
after an 802.1x user passes the authentication. And the switch then only permits the
packets that match all these four items. If the switch finds that the four items carried in
the packets sent by the user are not consistent with the bound ones, it will force the
user to go offline.
Note that: