![H3C S3100 Series Скачать руководство пользователя страница 378](http://html1.mh-extra.com/html/h3c/s3100-series/s3100-series_command-manual_3591810378.webp)
Command Manual (For Soliton) – 802.1x-System Guard
H3C S3100 Series Ethernet Switches
Chapter 1 802.1x Configuration Commands
1-19
undo dot1x
supp-proxy-check
{
logoff
|
trap
}
[
interface interface-list
]
View
System view, Ethernet port view
Parameter
logoff
: Disconnects a user upon detecting it logging in through a proxy or through
multiple network adapters.
trap
: Sends Trap packets upon detecting a user logging in through a proxy or through
multiple network adapters.
interface-list
: Ethernet port list, in the form of
interface-list=
{
interface-type
interface-number
[
to
interface-type interface-number
] } &<1-10>, in which
interface-type
specifies the type of an Ethernet port and
interface-number
is the
number of the port. The string “&<1-10>” means that up to 10 port lists
can be provided.
Description
Use the
dot1x supp-proxy-check
command to enable 802.1x proxy checking for
specified ports.
Use the
undo dot1x supp-proxy-check
command to disable 802.1x proxy checking
for specified ports.
By default, 802.1x proxy checking is disabled on all Ethernet ports.
In system view:
z
If you do not specify the
interface-list
argument, the configurations performed by
these two commands are global.
z
If you specify the
interface-list
argument, these two commands apply to the
specified Ethernet ports.
In Ethernet port view, the
interface-list
argument is not available and the commands
apply to only the current Ethernet port.
The proxy checking function takes effect on a port only when the function is enabled
both globally and on the port.
802.1x proxy checking checks for:
z
Users logging in through proxies
z
Users logging in through IE proxies
z
Whether or not a user logs in through multiple network adapters (that is, when the
user attempts to log in, it contains more than one active network adapters.)
A switch can optionally take the following actions in response to any of the above three
cases:
z
Only disconnects the user but sends no Trap packets, which can be achieved by
using the
dot1x supp-proxy-check logoff
command.