3Com SuperStack 4, Configuration Manual

Page: 254 / 432

266 C
HAPTER
11: 802.1
X
C
ONFIGURATION
again. During the quiet period, the Authenticator does not do anything related to
802.1x authentication.
Perform the following configuration in System View.
Table 293 Enabling/Disabling a Quiet-Period Timer
By default, the quiet-period timer is disabled.
Displaying and
Debugging 802.1x
After the above configuration, execute
display
command in any view to display
the running of the VLAN configuration, and to verify the effect of the
configuration. Execute
reset
command in User View to reset 802.1x statistics.
Execute
debugging
command in User View to debug 802.1x.
Table 294 Displaying and Debugging 802.1x
Auto QoS Auto QoS uses the Filter-ID standard RADIUS attribute.
Table 295 Auto QoS
802.1x Configuration
Example
Networking Requirements
As shown in the following figure, the workstation of a user is connected to the
port Ethernet 1/0/1 of the Switch.
The switch administrator will enable 802.1x on all the ports to authenticate the
users so as to control their access to the Internet. The access control mode is
configured as based on the MAC address
All the users belong to the default domain
3com163.net
, which can contain up to
30 users. RADIUS authentication is performed first. If there is no response from the
RADIUS server, local authentication will be performed. For accounting, if the
RADIUS server fails to account, the user will be disconnected. In addition, when
the user is accessed, the domain name does not follow the user name. Normally, if
the user's traffic is less than 2 kbps consistently over 20 minutes, they will be
disconnected.
A server group, consisting of two RADIUS servers at 10.11.1.1 and 10.11.1.2
respectively, is connected to the switch. The former one acts as the
Operation Command
Enable a quiet-period timer
dot1x quiet-period
Disable a quiet-period timer
undo dot1x quiet-period
Operation Command
Display the configuration, running
and statistics information of 802.1x
display dot1x [ sessions | statistics
] [ interface
interface_list ]
Reset the 802.1x statistics
information
reset dot1x statistics [ interface
interface_list
]
Enable the error/event/packet/all
debugging of 802.1x
debugging dot1x { error | event |
packet | all }
Disable the error/event/packet/all
debugging of 802.1x.
undo debugging dot1x { error | event
| packet | all }
Auto QoS Return String Comment
Filter-id
student QoS profile name