88
Configuration procedure
To do…
Command…
Remarks
1.
Enter system view.
system-view
—
2.
Enable the proxy detection
function globally.
dot1x supp-proxy-check
{
logoff
|
trap
}
Required.
Disabled by default.
3.
Enable
the
proxy
detection
function
on one
or more
ports.
In system view
dot1x supp-proxy-check
{
logoff
|
trap
}
interface
interface-list
Required.
Use either approach.
Disabled by default.
In Ethernet
interface view
interface
interface-type interface-number
dot1x supp-proxy-check
{
logoff
|
trap
}
Enabling the multicast trigger function
The 802.1X multicast trigger function enables a port to periodically multicast 802.1X authentication
requests. Use this function when the clients in your network cannot initiate 802.1X authentication. If the
multicast trigger function is enabled, disable the unicast trigger function to avoid duplicate authentication
packets.
To do…
Command…
Remarks
1.
Enter system view.
system-view
—
2.
Enter Ethernet interface view.
interface
interface-type
interface-number
—
3.
Enable the multicast trigger function.
dot1x multicast-trigger
Optional
Enabled by default.
Enabling the unicast trigger function
The unicast trigger function enables the network device to initiate 802.1X authentication when it receives
a data frame from an unknown source MAC address. Use the function in a network that has only some
802.1X clients and these clients cannot initiate authentication.
In the unicast trigger mode, the access network device sends a unicast authentication packet to the
unknown source MAC address to initiate authentication and resends the packet if it receives no response
within a period of time (set with
dot1x timer supp-timeout
). This process continues until the maximum
number of retries (set with
dot1x retry
) is reached.
If the unicast trigger function is enabled, disable the multicast trigger function to avoid duplicate
authentication packets.
