Command Manual (For Soliton) – 802.1x-System Guard
H3C S3100 Series Ethernet Switches
Chapter 1 802.1x Configuration Commands
1-7
Use the
undo dot1x authentication-method
command to revert to the default 802.1x
authentication method.
The default 802.1x authentication method is CHAP.
PAP applies a two-way handshaking procedure. In this method, passwords are
transmitted in plain text.
CHAP applies a three-way handshaking procedure. In this method, user names are
transmitted rather than passwords. Therefore this method is safer.
In EAP authentication, a switch authenticates supplicant systems by encapsulating
802.1x authentication information in EAP packets and sending the packets to the
RADIUS server, instead of converting the packets into RADIUS packets before
forwarding to the RADIUS server. You can use EAP authentication in one of the four
sub-methods: PEAP, EAP-TLS, EAP-TTLS and EAP-MD5.
Related command:
display dot1x
.
Note:
When the current device operates as the authentication server, EAP authentication is
unavailable.
Example
# Specify the authentication method to be PAP.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] dot1x authentication-method pap
1.1.4 dot1x dhcp-launch
Syntax
dot1x dhcp-launch
undo dot1x dhcp-launch
View
System view
Parameter
None
