Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
Chapter 3 HABP Configuration
3-1
Chapter 3 HABP Configuration
When configuring HABP, go to these sections for the information you are interested in:
z
z
z
Displaying and Maintaining HABP
3.1 Introduction to HABP
When a switch is configured with the 802.1x function, 802.1x will authenticate and
authorize 802.1x-enabled ports and allow only the authorized ports to forward packets.
If a port fails 802.1x authentication and authorization, protocol packets passing the port
will be blocked. The Huawei Authentication Bypass Protocol (HABP) aims at solving
this problem.
On an HABP-capable switch, HABP packets can bypass 802.1x authentication and
MAC authentication, allowing communication among switches.
HABP is built on the client-server model. Typically, the HABP server sends HABP
requests to the client periodically to collect the MAC address(es) of the attached
switch(es). The client responds to the requests, and forwards the HABP requests to the
attached switch(es). The HABP server usually runs on the administrative device while
the HABP client runs on the attached switches.
3.2 Configuring HABP
Complete the following tasks to configure HABP:
z
z
3.2.1 Configuring the HABP Server
With enabled with HABP server, the administrative device starts to send HABP
requests to the attached switch(es). The HABP responses include the MAC address(es)
of the attached switch(es). This makes it possible for the administrative device to
manage the attached switch(es).
You only need to configure the interval of sending HABP requests on the administrative
device.
