695
If the MD5-Challenge authentication is used, the device does not use an SSL client policy during the
authentication process.
Examples
#Specify SSL client policy
policy_1
to be used by an 802.1X client-enabled device on
Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x supplicant ssl-client-policy policy_1
Related commands
display dot1x supplicant
dot1x supplicant enable
ssl client-policy
dot1x supplicant username
Use
dot1x supplicant username
to configure an 802.1X client username.
Use
undo dot1x supplicant username
to restore the default.
Syntax
dot1x supplicant username
username
undo dot1x supplicant username
Default
No 802.1X client username exists.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
username
: Specifies the 802.1X client username, a case-sensitive string of 1 to 253 characters.
Usage guidelines
802.1X client usernames can include domain names. The supported domain name delimiters
include the at sign (@), backslash (\), dot (.), and forward slash (/). Usernames that include domain
names can use the format of
username
@
domain-name
,
domain-name
\
username
,
username
.
domain-name
, or
username
/
domain-name
.
If you want to use backslash (\) as the domain name delimiter, you must enter the escape character
(\) along with the backslash (\) sign.
If a username string includes multiple configured delimiters, the device takes the rightmost delimiter
in the username string as the domain name delimiter. For more information about the domain name
delimiters, see the
dot1x domain-delimiter
command.
Examples
# Configure the 802.1X client username as
aaa
on a port.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
