3Com Switch 7754, Configuration Manual

Page: 402 / 940

402 C
HAPTER
39: 802.1
X
C
ONFIGURATION
Prerequisites Configuration of basic 802.1x
Configuring Proxy
Checking
This function needs the support of 802.1x client program and CAMS, as listed
below.
■
The 802.1x clients must be able to check whether multiple network modules,
proxy servers, or IE proxy servers are used on the user devices.
■
On CAMS, enable the function that forbids clients from using multiple network
modules, a proxy server, or an IE proxy.
By default, the use of multiple network modules, proxy server, and IE proxy are
allowed on 802.1x client. If you specify CAMS to disable use of multiple network
modules, proxy server, and IE proxy, CAMS sends messages to 802.1x client to
request the latter to disable the use of multiple network modules, proxy server,
and IE proxy when a user passes the authentication.
n
■
The proxy checking function needs the support of 3Com’s 802.1x client
program.
■
The configuration listed in Table 320 takes effect only when it is performed on
CAMS as well as on the switch and the client version checking function is
enabled on the switch (by the
dot1x version-check command).
Configuring Client
Version Checking
Table 320 Configure user proxy checking
Operation Command Description
Enter system view system-view -
Enable global proxy checking
function dot1x
supp-proxy-check
{ logoff |
trap }
Required
By default, the global 802.1X
proxy checking is disabled.
Enable proxy checking for a
port In system view:
dot1x
supp-proxy-check
{ logoff |
trap } [ interface
interface-list ]
Required
By default, the 802.1X proxy
checking is disabled for the
port.
In port view:
dot1x
supp-proxy-check
{ logoff |
trap }
Table 321 Configure client version checking
Operation Command Description
Enter system view system-view -
Enable 802.1x client
version checking dot1x version-check [ interface
interface-list ]
Required
By default, 802.1x client version
checking is disabled on a port.
Configure the
maximum number of
retires to send version
checking request
packets dot1x retry-version-max
max-retry-version-value
Optional
Defaults to 3.