Operation Manual – 802.1x and System Guard
H3C S3100-52P Ethernet switch
Chapter 1 802.1x Configuration
1-22
Note:
As for the
dot1x version-user
command, if you execute it in system view without
specifying the
interface-list
argument, the command applies to all ports. You can also
execute this command in port view. In this case, this command applies to the current
port only and the
interface-list
argument is not needed.
1.4.3 Enabling DHCP-triggered Authentication
After performing the following configuration, 802.1x allows running DHCP on access
users, and users are authenticated when they apply for dynamic IP addresses through
DHCP.
Follow these steps to enable DHCP-triggered authentication:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enable DHCP-triggered
authentication
dot1x dhcp-launch
Required
By default,
DHCP-triggered
authentication is disabled.
1.4.4 Configuring Guest VLAN
Follow these steps to configure guest VLAN:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Configure port access
method
dot1x
port-method
portbased
Required
The default port access
method is
MAC-address-based.
That is, the
macbased
keyword is used by
default.
In system
view
dot1x guest-vlan
vlan-id
[
interface
interface-list
]
interface interface-type
interface-number
dot1x guest-vlan vlan-id
Enable the
guest
VLAN
function
In port view
quit
Required
By default, the guest
VLAN function is disabled.
