3Com S7902E, Configuration Manual

Page: 1904 / 2621

2-2
Currently, MAC authentication and port security cannot work together with EAD fast deployment. Once
MAC authentication or port security is enabled globally, the EAD fast deployment is disabled
automatically.
Configuration Prerequisites
z
Enable 802.1X globally.
z
Enable 802.1X on the specified port, and set the port authorization mode to auto .
Configuration Procedure
Configuring a freely accessible network segment
A freely accessible network segment, also called a free IP, is a network segment that users can access
before passing 802.1X authentication.
Once a free IP is configured, the fast deployment of EAD is enabled.
Follow these steps to configure a freely accessible network segment:
To do… Use the command… Remarks
Enter system view system-view —
Configure a freely accessible
network segment dot1x free-ip ip-address
{ mask-address | mask-length }
Required
No freely accessible network
segment is configured by
default.
z
You cannot configure both the free IP and the 802.1X guest VLAN function on a port.
z
If no freely accessible network segment is configured, a user cannot obtain a dynamic IP address
before passing 802.1X authentication. To solve this problem, you can configure a freely accessible
network segment that is on the same network segment with the DHCP server.
Configuring the IE redirect URL
Follow these steps to configure the IE redirect URL:
To do… Use the command… Remarks
Enter system view system-view —