H3C S5120-EI Series, Operation Manual

Page: 580 / 1191

2-2
Configuring EAD Fast Deployment
Currently, MAC authentication and port security cannot work together with EAD fast deployment. Once
MAC authentication or port security is enabled globally, the EAD fast deployment is disabled
automatically.
Configuration Prerequisites
z
Enable 802.1X globally.
z
Enable 802.1X on the specified port, and set the access control mode to
auto
.
Configuration Procedure
Configuring a freely accessible network segment
A freely accessible network segment, also called a free IP, is a network segment that users can access
before passing 802.1X authentication.
Once a free IP is configured, the fast deployment of EAD is enabled.
Follow these steps to configure a freely accessible network segment:
To do… Use the command… Remarks
Enter system view
system-view
—
Configure a freely
accessible network
segment
dot1x free-ip ip-address
{
mask-address
|
mask-length
}
Required
No freely accessible network segment is
configured by default.
z
You cannot configure both the free IP and the 802.1X guest VLAN function.
z
If no freely accessible network segment is configured, a user cannot obtain a dynamic IP address
before passing 802.1X authentication. To solve this problem, you can configure a freely accessible
network segment that is on the same network segment with the DHCP server.