Installation manual

Command Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-6
1) If the users obtain their IP addresses dynamically, you must couple dynamic user
binding with DHCP Snooping in the following way:
z Enable DHCP Snooping globally on the switch.
z Configure the switch port connecting to the DHCP server to be a DHCP Snooping
trusted port.
2) If the users use static IP addresses, they must use 802.1x clients developed by
Huawei Technologies and select the Upload user IP address option in the [802.1x
Network Settings] dialog box when creating a new connection.
Related command: dot1x.
Example
# Enable 802.1x dynamic user binding.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] dot1x dynamic-binding-user enable
1.1.6 dot1x guest-vlan
Syntax
dot1x guest-vlan vlan-id [ interface interface-list ]
undo dot1x guest-vlan vlan-id [ interface interface-list ]
View
System view/Ethernet port view
Parameter
vlan-id: ID of Guest VLAN, ranging from 1 to 4094.
interface_list: Enable the Guest VLAN interface list. interface_list = { interface_type
interface_num | interface_name } [ to { interface_type interface_num |
interface_name } ] &<1-10>. Note that after the key work to, the port number must be
equal to or greater than the port number before to. &<1-10> means the parameter
before it can be input repeatedly for 10 times.
Description
Using the dot1x guest-vlan command, you can enable the Guest VLAN function on
specified port. Using the undo dot1x guest-vlan command, you can disable this
function.
When you execute this command in system view, if you do not input the interface-list
parameter, it means that to enable Guest VLAN on all ports; if you specify this
parameter, it means that to enable Guest VLAN on the specified port.