Operation Manual - Security
Quidway S3000 Series Ethernet Switches
Chapter 1 802.1x Configuration
1-7
By default, authentication will not be launched when the user runs DHCP and applies
for dynamic IP addresses.
1.2.7 Configure Authentication Method for 802.1x User
The following commands can be used to configure the authentication method for
802.1x user. Three kinds of methods are available: PAP authentication (RADIUS server
must support PAP authentication), CHAP authentication (RADIUS server must support
CHAP authentication), EAP relay authentication (switch send authentication
information to RADIUS server in the form of EAP packets directly and RADIUS server
must support EAP authentication).
Perform the following configurations in system view.
Table 1-7
Configure authentication method for 802.1x user
Operation
Command
Configure authentication method for
802.1x user
dot1x
authentication-method
{
chap
|
pap
|
eap
md5-challenge}
Restore the default authentication
method for 802.1x user
undo dot1x
authentication-method
By default, CHAP authentication is used for 802.1x user authentication.
1.2.8 Set the Maximum times of authentication request message
retransmission
The following commands are used for setting the maximum retransmission times of the
authentication request message that the switch sends to the supplicant.
Perform the following configurations in system view.
Table 1-8
Set the maximum times of the authentication request message retransmission
Operation
Command
Set the maximum times of the authentication request
message retransmission
dot1x retry
max-retry-value
Restore the default maximum retransmission times
undo dot1x retry
By default, the
max-retry-value
is 3. That is, the switch can retransmit the
authentication request message to a supplicant for 3 times at most.
